Reform requires communications firms, seen as gateway to other vital infrastructure, to develop detailed plans for identifying and preventing online attacks