How has the federal government responded to possible terrorist attacks (mitigation) where civil liberties have not been endangered?

Considering that so much of the nation’s critical infrastructure is privately owned, how has the government regulated possible civil liberties issues related to private sector employers/employees?

Can balanced policy be implemented regarding critical infrastructure without eroding privacy, freedom of information or other civil liberties?