Former Joint Chiefs of Staff Vice Chair James Cartwright and others took part in a role-playing game as part of a cybersecurity conference. The participants pretended a foreign country had launched a cyber attack against a U.S. oil company. They talked about how the government had not yet come up with a policy defining “an act of war” in the context of a cyber attack.