In the wake of the SolarWinds breach, lawmakers turned to industry for recommendations