How do you Define “Reasonable” in Cyber Legislation?