The companies, including Microsoft and Computer Associates, urge that the government only impose security improvement mandates if market forces fail, while federal action for securing the most sensitive networks should try to be as non-disruptive as possible to market security innovation.