Industry figures in the U.S. have pointed to the tangled web of regulatory and supervisory obligations as a major obstacle to effective cybersecurity measures by financial institutions, urging lawmakers to simplify the rules to allow for better defence by companies.