In this op-ed, a cybersecurity executive says the ACDC is well-intentioned legislation, but policy often underestimates the complexities of international cyber operations.