A ministerial push to rally major companies around cyber resilience drew only a small group of signatories, turning the exercise into a test of how far persuasion can go without enforcement.