Transcripts For CSPAN3 Deputy 20240702 : vimarsana.com

CSPAN3 Deputy July 2, 2024

Thank you so very much. Thank you so much for moderating a wonderful fireside chat. What a wonderful way to end the program. We are thrilled and honored to have you. So thank you, very much, again. Please welcome the cybersecurity chief of staff, charles williams. Good morning and welcome to the final day in what has been an amazing summit. We have three general sessions that close with the fireside. If youve enjoyed the many conversations both on and off stage over the past few days, be sure to bookmark billings and cybersecurity state and local summit march 19th and 20. Weve got a dozen webinars coming out this october for Cyber Security awareness month. Make sure to bookmark that, too. We begin with the fireside featuring the National Attorney adviser for cyber and emerging technologies. The fireside is titled building a National Strategy to protect our nations critical sectors. The white house has taken a very active role in engaging with the public and private leaders to foster and embrace technological change but also to ensure that security and responsible guideposts are included. This mornings fireside will be moderated by brad, the executive vice president. The featured speaker for this important discussion, ms. Newburger. For cyber and emerging technologies, National Security council, the white house. Please join me in giving these to a warm welcome and round of applause. Good morning. Good morning. I think i can speak for everyone in this room, it is truly an honor to be with you today and welcome back. In a just got in on your flight last night. Thank you. Its terrific to be here. We are excited to have an important conversation about cybersecurity and National Security, why dont we get started. We will start by taking a moment to reflect. You are in the third year of your role and have accomplished so much and there is so much happening. Ransomware, russia and ukraine, attacks and Critical Infrastructure. Like to start by getting some of your thoughts around this. Im really excited to talk about the hard work and victory that President Biden and cyber has worked on. If i can paint a picture of for a moment, pragmatically, regarding the cyber environment today. First, defense is more expensive and complicated. Right, offense and attack is practically free. So that imbalance is one key piece. Second, a shift from hardware to software, anyone can do software. And there are Software Packages readily available. Which has also made the ease of attack is simpler. Seeing several individuals talk about Software Defined warfare. And finally we are proud to be a nation of laws, regulations and morals that guide our work. Not all of our adversaries operate in the same way and i can make it more complicated space when you talk about Critical Infrastructure that is owned and operated by the private sector, so those principles, attack is easier, it is easy, the shift from hardware to software and the regulations governing our work to make, the victories i will talk about, while hardwon and significant, they will be ever seen in this. So i often think about my Lessons Learned, what are they . Preparation, International Partnership in the private sector. We ask ourselves at the white house, a core question in each of that to see where we are and track the progress of cyber in all the work we do. First, preparation. Ukraine has showed us that the work weve done to prepare for the first brutal invasion against ukraine, to prepare for this one, made ukraine far better prepared for the significant attacks. I recall in the three weeks before the war, from an intelligence perspective, we were talking with european allies and we expected russias invasion to come. We were talking with ukraine about the fact that they were fundamentally connected to the Russian Energy groups. As we all know it is incredibly difficult to defend against one you are connected. They made a call to disconnect from that grade and connected to the european grade. So that preparation, the question for us in the United States is, are the digital doors of our windows and doors locked. Before the beginning of President Bidens administration, we couldnt answer that question. Not because folks were not doing a terrific job of sharing, but fundamentally the question we need to know is there are 97 critical pipelines in the country, how have they passed the most recent vulnerability, have they passed the Vulnerability Assessment in key operations . So the work that the Biden Administration has done to put in place regulations in various sectors that require Critical Infrastructure now gives us the ability for pipelines, aviation, rails, water and i will talk more about the additional sectors we are working on, to actually have an abc rating, that is game changing. In the runup to the war when president whiting turned to us and said what is the risk of russian blowback. He was working with european and asian allies to put that in place. We were able to answer the question with the pipeline sector. That was the first one under the emergency authorities where regulations were put in place. A first measure of our preparation as a country and as an answer to that question, we track it closely to the white house and Work Together to ensure that we can answer that question better and better. First, do we havent abcd rating and how do we make sure we get to all letter ease. Key question, is every piece of knowledge, intelligence and cybersecurity advice we have, how we shared that regularly and in an ongoing way with our key partners . We will talk about a number of initiatives underway that is a driving question that President Biden always asks. And in the private sector, deployed. My first phone call was to Key International allies and partners and my second was emails connecting to them. To that point because private sectors acknowledge that innovation and it is so key. So those questions are the way that we organize ourselves and measure our progress in defending Critical Infrastructure in the United States. Thank you for sharing that. When you talk about Lessons Learned, i at interested in how you would incorporate those into future policies. President biden talks about how cyber is core to geopolitics today. We know that the combination of ai, advanced telecom, quantum sensors, with the precision they bring in the advance that they bring in terms of measurements, will drive labor had technologies, and leap ahead breakthroughs in the next few years. I just returned from brussels aware, in september, before judge ept was a household name, we signed an agreement with the European Union to focus on five areas of ai for societal good together. And our goal was not only to drive the technological approaches, but our goals were to show that the u. S. And eu could do tech together and we can put in place data protections, privacy protections that are so core to how we compete with our values and with our approaches to ai and advanced tech. Certainly, for certain areas, think about the area of the surveillance, there are significant parallels that ai brings. So when we look at the approach, we think both of the promised and the perils. And in our policy approaches we want to make sure we are advancing on the products, hence, we agreed with the European Union and also very much focused on the perils. And as we see, because, as i talked about, we are a nation of laws, regulations and morals in terms of privacy and what drives our work. That is core to the competition, particularly with china. And those five areas are extreme predictions, agricultural optimization, driven by the impact of extreme climate, drought, floods, on how we broke grow crops and ensure we still have the Food Production we need. Optimization of our electricity grade. Trying to bring in different kinds of energy, trying to move to more of the world using electric vehicles. Where commuters are, what times, so the infrastructure is built to support that growth moving forward. There are so many exciting advances in health between the u. S. And the eu. And finally emergency management. How do we ensure that we can respond more effectively to emergency use and certainly, the role of satellites and helping have the imagery to respond to emergencies and how we can do that more effectively and efficiently, worked on those projects for many years. So i those policy approaches, managing the girls while really pressing forward on the progress. Thinking back you were talking about the progress made in terms of Critical Infrastructure. Looking back, being involved for 10 years, we have really made more progress in the last three years that we have in the last 10. So in terms of what your perspective is in terms of next steps and continuing to increase that partnership. What has underpinned that significant progress, as you say, because i agree, there has been more progress in the last three years then the last 15. Voluntary model and to add to that the regulatory model. We recognize that, when mentioned earlier, when President Biden asked the question, what is the risk of blowback. As good as private partnerships can be, it is very different when one shares threat information and vulnerability with a Pipeline Company and the regulator can say, what is your plan to fix this . And then hold the company to that. Of course, a part of that is of course the partnership. Thats why we need both models together. We need to be sharing this information actively but we also need to have regulators to have the ability to be at the table. They know the sector well and that gives us the confidence because Critical Infrastructure is a zero fail mission. Zero fail in every country. As i travel around the world and talk to policymakers, we are all grappling with that. The ability and vulnerability of our Critical Infrastructure is rightly pointed to the fact that we owe our citizens confidence that they will have clean water and power and will be able to get gas to go to work in the Pipeline System will not be down for five days due to a criminal attack. That has been the biggest fundamental shift and its underpinned by fantastic information sharing, the joint cyber advisories, the Intelligence Community and also went door and partners are doing. A shout out to the team that did the recent one on the chinese attacks and Critical Infrastructure and laid out practical and actionable mitigation to help companies Work Together. And finally, though work that we are doing with the private sector. With the private sector, to drive more secure products. They launch the Cyber Trustmark last month. And the goal of Cyber Trustmark was bringing together and bridging three communities. Consumers tell us they want more secure tech in homes, schools and businesses and companies are saying, okay we will build more secure tech but how do we differentiate ourselves to people who are shopping and our goal for the government is to use our integritys. People trust in energy star because they know the government is standing behind that in standards and certifications. That launched a shout to that chairwoman of the fcc. She really did the hard work to pull that together. And this built a standard following up on the president s executive order from two years ago. The program has launched and our aim is to have iot marked products in stores, online. Amazon agreed to prioritize it. Thanksgiving, 2024, please look out for that. Some of my discussions in brussels, those can be sold in multiple markets and the department of energy for smart readers and smart routers. So our vision is to expand the number of products and this really shows you the way weve been working across to build that team cyber approach. They are running these priorities, building standards for things like smart meters. And fundamentally we have companies that play roles both in meeting Cyber Security standards and Companies Like best buy and amazon that are thrilled to be a partner to help consumers. I think that is the final piece. This is a theme for a lot of different tech companies. I think the industry is listening to the guidance. Thank you for that. One of the Lessons Learned was around farm partnerships. It certainly played with our ally partners. Some had a key role in the Russia Ukraine and as we focus on the more specific, id love to get your perspective around how the government is really thinking about continuing to strengthen these partnerships and the role. That is a great question. President biden talks about partnerships is a key part of everything we do. The more we operate together the more we can be a force for progress in the world. I will talk about three examples. President biden welcome president chavez of costa rica to the white house last week. And costa rica did cohost of democracy, and from a cyber perspective, president chavez called out, the first one in latin america to callout russias invasion of ukraine. And he used the word criminal. And they faced significant Cyber Attacks thereafter. A shout out to the fbi and the u. S. Ambassador, a terrific woman. Her father was the ambassador there, too. Talk about a family legacy. The fbi had a team on the ground the next day to ensure we could help costa rica rapidly recovered so that they can order medical services online, they were all disrupted. Then the state department worked closely to put together a 25 million grant to help fundamentally, costa rica, filled out the cyber resilience. That money is already working on the ground, that is also part of building a Cyber Security center for the country and military. And finally recognizing that the nations infrastructure, their telecommunications, is the foundation of security, we did the first ever financing grant of 300 million to help costa rica move off of walled infrastructure to trusted infrastructure. Shout out to the leader for doing that work into the 300 Million Financing grant for the 5g trusted infrastructure in costa rica. So that is one. The focus to ensure that when a partner has a Cyber Security attack we can help put resources on the ground and help them recover quickly. Help them build a resilience and fundamentally to ensure their telecommunications infrastructure, which is the foundation of the country, is secure. The second model of International Partnership, sorry, the International Counter Ransomware Initiative will be october 21st in d. C. , grown from 31 to 37. Everyone is dealing with the destruction of cybercrime. In the u. S. It has disrupted hospitals, schools, companies are facing that and certainly it is a major issue and it is a problem that attackers and one country, largely based in russia, often beyond the reach of law enforcement, infrastructure around the world, so convening that partnership with the United States, designing it and has built it and grown it is an integral part of our work. We are working on a coordinated approach to ransom payments, that will be a major take away. 47 countries and a statement in that area. And the final example of our International Partnership is the virtual Cyber Incidents capability response. Europe faces significant risks of russia attacks and we want to ensure that if there was one all the neighbors in nato can quickly coordinate a response. So International Partnerships was a major part of the work we are doing and it is also a major part where we worked hard to innovate with different models based on the different kinds of partnerships that are needed. Some, bilateral, some very large and multilateral. Some small and focused. A lot of industry in this room. Across the United States the Industrial Base has built around that Cyber Security and supported the government, how can we help support our foreign partners . It underpins all of our foreign partners. When we do a 25 million grant to costa rica, that is for cybersecurity support and detection, Rapid Response capability. So certainly the fact that the u. S. Is one of the leading in the nation in the cybersecurity, it is due to our ability to project a open and operable cyberspace. Certainly the information sharing, frankly, between companies. The power of connecting that Network Internet routers with andpointdetection at each endpoint and that sharing that happens across the private sector is also a force for good. So driving more of that is a piece of it. And finally, you mentioned secure by design, major effort by mike close colleague, the trustmark. So that custo

© 2025 Vimarsana