Industry should be ‘very careful’ about offloading coverage of cyber attacks and pandemics to public sector