Skip to main content

tv   Washington This Week  CSPAN  April 4, 2015 2:44pm-3:26pm EDT

2:44 pm
up and he did not have his cane. i said dad do i need to send some buddy to the hotel to get your cane? he straightens up and says, i'm in the capital. i don't need a cane today. and he walked without his cane for the entire day. i know they were super proud. >> five newest members of congress talk about their careers and personal lives and share insight about how things work on capitol hill. join us for all five conversations each night at 9:00 eastern on c-span. >> next, remarks from nsa director and head of u.s. cyber command, admiral michael rogers. he was the keynote speaker at a recent cyber security summit in washington, d.c. the event was hosted by the armed forces communications and electronic association. this runs 35 minutes. [applause]
2:45 pm
>> can you hear me? somebody say rolled high. [laughter] come on. you don't insult a guy when he shows up. thank you so much for taking the time in your busy lives for what i think is an important topic in this time in our nation. what brings mike rogers to spend some time with you today? as the commander of the united states cyber command, three primary missions. like many of you, responsibility for defending networks, in this case, the department of defense. a pretty large operation. second mission for united states cyber command is to generate the cyber dedicated workforce.
2:46 pm
that workforce will work from the defensive side to the offensive side. that is about 6200 people. we are halfway through the process of creating that workforce. the third mission is one directed by the president and the secretary of defense, to defend u.s. -- to defend critical u.s. infrastructure. the federal government has designated 16 segments in the private sector as having implications. think about aviation, power, finance -- there are 16 different segments. nsa aids foreign intelligence organization. but the second mission that is
2:47 pm
incredibly important in the cyber security arena is nsa as an information assurance. we help develop the security standards for the department of defense and partner with other elements of the federal government to do it in systems government wide increasingly to use our capability to help her with the department of homeland security and the fbi in partnering with the private sector. they're quite frankly has not been a major security penetration in the last six months or so. given the echo here, i'm going to try to step away from this. is that a little bit better for you guys? that was a little bit of feedback. nsa, cyberspace, fundamental
2:48 pm
roles for the federal government in the cyber security arena. not the only organizations with roles in the federal government for cyber security. my first observation in a year in the job and today marks my specific one-year anniversary -- [applause] we partner with the department of homeland security, with the federal bureau of investigation, with other elements within the department of defense, in the private sector. one of my takeaways after a year in the job and i believe that this before i got the job and it has been reinforced by the events of the last year -- cyber is the ultimate team sport. there is not one single entity that has all the answers. there is not wincing will
2:49 pm
technology that is going to solve this problem set. in the end, it is our ability to harness the power of partnership's and bring together a wide spectrum of capability to help. and we've got to bridge the private sector and the public sector. and we've got to bring this together in an integrated way if we are truly going to defend our nations vertical infrastructure, which is one of the specific missions for u.s. cyber command. but i would argue more broadly if we are going to defend the systems of the private sector within our nation, we have got to bring together the private sector and the public sector in a way that traditionally we have not seen. we have got to do this real-time and we have got to do this in an enduring basis. it just just the that -- it can't just be that when we come together is when there is a problem. if i am honest, i was struck by,
2:50 pm
this is great, but the cow is out of the barn. now we are reacting and this is a cleanup on aisle nine scenario. i don't think that gets us where we need to be in the future. where we need to the in the future is the ability to harness a set of partnerships that allows us to interact with each other in a real-time basis so that i, using the capabilities of an essay and cyber community command, can push to the private sector and say this is what i think is coming at you. this is what it is going to look like. what i am interested for the private sector is did you see what we told you you were going to see? what did we miss? what worked out well? what were the telltale signs that told you something was company?
2:51 pm
there are always advanced indicators well before you get to the final act, well before you get to the destructive act. there are always precursor events that give you a sense of what is coming at you. i would like this in the malware because i am interested in tearing it apart and developing counters so we can defeated in the future. not just you, but us, more broadly in the private sector. i am interested in the signatures that help the system recognize the activity. the way we are doing this in some ways is we are all trying to learn independently. that is a very painful way to go about gaining insights and experience.
2:52 pm
it tends to be very resource intensive and we constantly repeat the same mistakes over and over again. if each one of us learns them independently. i would like to see what we can do to bring it all together. the second point i tried to make, people, is this challenge is about a whole lot more than just technology. technology is a big part of this problem set and the solution. but it is every did as much about culture and the human dynamic as it is about technology. you name the system, whether it is in the private sector or the public sector, in the end, it is motivated men and women that really make it work. and it is our ability to align that technology with that motivated and well-trained men are woman that really gives us our edge. i am the first to acknowledge, hey, we have some amazing technology. we can do some really interesting things. but at its heart, we are an enterprise powered by motivated men and women.
2:53 pm
today is pretty wide -- you are looking at crime, doing a sharp tank, looking at how to build a workforce, looking at acquisition. it's a pretty broad swath. i thought it was a pretty is setting. as i said, there is no single silver bullet that is going to fix all of this. it's about how we can work together to make it all work. and that is a challenging time for us right now. i am the first to admit i am leading at least one of my two organizations that still has a measure of distrust among some. i acknowledge that. i don't pretend it is otherwise. yet we have to figure out a way that we can harness the capabilities of nsa to partner with the private sector in the name of defending our nation. nsa has some amazing technical capabilities in the information assurance arena that are real positive for us as a nation.
2:54 pm
and i want to see us apply those in a partnership way with the partner -- the private sector that maximizes value. as a nation, we are paying for that capability. i would like to see us use it in a positive, constructive way partnering with the private sector. that's important to me. rather than just talk at you, we are going to go the tablet route. i will try to take questions from the audience. excuse me, i need to put on my glasses for that. let's see what we got. ok, we don't have any entries yet. this is not a good-sized. -- good sign. [laughter] i'm looking at a blank tablet. if anybody send me something and we just missed it.
2:55 pm
damn it. [laughter] i apologize. who was helping me, young lady? i just lost the outlook app. [laughter] come on. i don't see it listed as one of your apps. where is she? she was standing in the back. here we go. >> you have one question. >> oh. [inaudible] there you go. you see, the positive side was
2:56 pm
that it wasn't that rogers didn't know where to go. so the questions are shutting to come in so we will take the first one. the first one comes from cindy thomas. cindy, i apologize. it is loading your question real quick. so the question from cindy is, as a nation, we have been primarily focused on enemies abroad. with the emergence of islamic extremism, we recognize now there are domestic insider threats. is there information for the emergence of corporate nationstates and how will we act and respond to those? cindy, are you here? i want to make sure i am getting the question. is the question focused on the idea about how our corporations going to engage in this world? >> the potential threat of companies [indiscernible]
2:57 pm
>> so talking about the hack back type of idea, corporations. [inaudible] in broad terms, i am a believer of the application of force. to capabilities in the non-kinetic world. i am not a big fan of the corporate world taking on this idea. it is not without precedence. if you go back to family history and you look back at when nationstates have lacked capacity on their own, in the early days of the american revolution, we had not yet gained the foresight to gain a navy -- we turned to the private
2:58 pm
sector and said we will allow you to take that private ship you own and, acting as an agent of the state, if you will go after those british ships, we will give you legal protection. we will let you sell the cargo and take some of the monetary profit from that. so we have done this before. in general, i am not a big fan of going that way. earlier today, i was looking at some analysis on some entities that are already out there offering a wide range of services. i'm not sure that in the long run that is in the best interest. ok, shawn. in recent testimony before congress, you called for more offensive capabilities. what exactly does that entail?
2:59 pm
the point i was try to make in my testimony last month was that i believe that a defensive only passive strategy is not in the long run going to deter nationstates and groups and individuals from engaging in some of the behaviors we have seen. from the theft of intellectual property to the destruction of data to the manipulation of data. that returns is an important component for as a nation how we are going to change the dynamic we are dealing with. right now we are reacting. you saw that earlier this week with the administration's announcement of its executive order in which the administration has now authorized the application of sanctions against both individuals, groups, nationstates who engage in offensive cyber behavior. i think that is another could step along the way.
3:00 pm
i am also a big fan of we should develop a set of offensive capabilities. their application and usage needs to be tightly controlled. that is not a decision i should make. that is a decision a policymaker should make.it's a decision a policymaker should make, as we do now with the application of force in more traditional kinds. let's see. ok, this is from patrick tucker. at the security summit last year on this very stage, emil rogers asked the audience if any of them had suffered any kind of "compromise of their personal information." what was that event and how are you hacked? [laughter] patrick, where are you? badger, i apologize. that is not one i will go into.
3:01 pm
[laughter] i will try shawn no. so this is from sean. are you there? all the way in the back. how specifically wl the nsa contribute intelligence to the nations cyber threat center? the cyber threat intelligence center is designed to act, if you will, as a kind of central and politico -- analyticum as a one-stop shop, much as the national counterterrorism center has overall responsibility for bringing together all the efforts of the intelligence community and the counterterrorism set. seatacctic will do the same thing. justin duncan, are you here?
3:02 pm
is there any effort underway to leverage clear and retiring or exiting military members to act as trusted agents to bring classified indicators and intelligence to the private sector? the short answer is no, that i am aware of. i think what really gets to the heart of your question is what can we do to try to increase the throughput of classified information into the private sector? what you have outlined is one way to do it. quite frankly, what i am trying to push largely in my nsa had as the leader of an intelligence organization is why can't we outright declassify them, much of what we are doing on the cyber defensive side?
3:03 pm
we are not always went to be able to do that. but we have shown in the aftermath of sony and the north korean piece, we have shown an increased ability to try to sanitize information that way jennifer wright -- that we try to generate. let's see. ok, this is from victor ekinabe. first, outlook is a phenomenal ap on the ipad. can you speak on how industry can help share in its learning and technical developments?
3:04 pm
on the nsa side, we've got a pretty long term effort with commercial counterparts. if you go to nsa.gov, look on the lower left-hand side and you will see a link that talks about how to do business with nsa. we are interested in reaching out and partnering with the private sector. i am the first to remind both of the organizations that i am responsible for leading, hey much of the intellectual india did -- intellectual ingenuity is in the private sector, not in the government. if we are going to be effective, we have to reach a and partner with them. on the u.s. cyber command site -- side, i am trying to create some infrastructure in the private sector away from our headquarters, goat or equity to
3:05 pm
where there is industry concentrations as a way to do this. so it is something we are definitely interested in. ok. this is from metra forteski. are you from nsa? >> now. -- no. dir. rogers: the way the question was asked, i was try to determine if you are. this may help us prevent attacks at the one on sony in the future.
3:06 pm
can you talk about any other effort nsa is taking to further public-private partnerships? under our information assurance set, nsa helps in the development of standards, in writing signatures that recognize activity that we quite friendly share with the private sector. you won't necessarily see us. i use it on dod systems. i use it on our own systems. so the very things we try to use with the public sector, we use ourselves. when it comes to cryptographic standards, to some technical development, we are committed to sharing as much of that as we can. if you look at the -- the website is one of the vehicles we use. we push it directly to a lot of the major vendors, whatever the particular market segment is and say, hey, this is how we use it. let's see.
3:07 pm
this is from bill hill. at the risk of being on your watchlist -- [laughter] i apologize about the role tied. it's just a conditioned response. [laughter] all right, bill thanks very much. daniel fink are you here? ok. with the competition between private and government sectors for cyber talent, how do you plan to retain your cyber workforce? this is not a challenge that is unique to cyber for the department of defense or the intelligence community. it is purely going to be about money.
3:08 pm
we are clearly not going to be your first choice for a work voice -- a workplace. but what are the ways we are going to compete? we are going to compete five different ways. number one, we are going to. attract. people because of our vetoes, or culture of service number two, we are going to attract people because of our mission. we defend the nation for number three, we are going to let you do some amazing things you can't do anywhere else. number four, we will give you a lot of responsibility at a young age. once we give you your training and are competent in your abilities, we give you response ability. number five, we are a global organization.
3:09 pm
if you want to work in europe, asia, multiple places in the united states, we have work spots for you. if you are an adrenaline junkie, if you want to be in afghanistan, iraq, fill in the blank, anywhere that dod is in general, you will find nsa and u.s. cyber command partnered right there with them. this is from stephen orenstein. do you foresee an nsa reorg that would reintegrate overlapping standards of cyber. today is my one-year anniversary . one of the things i have done in that year is i posed a series of 12 questions. one of the 12 questions talks about is our structure optimized for the future? is it reflective of our past? and i specifically said i want the team to take a look at that and i want you to look 10 years down the road. what do we need to do today to ensure that we have optimized
3:10 pm
ourselves to execute our mission in defending the nation five to 10 use from now. we just can't sit here and say to ourselves look at all of the amazing things we have been able to do in the past. as a leader, i am not a big proponent of that thought process. ok, scott macione. i assume you are a media got. while legislative authorities does cyber command need from congress? the first thing i would ask is we've got the cyber information sharing past. that is not a cure-all and it is not a silver bullet. it is an important step in
3:11 pm
helping us deal with this idea private and public hardships. quite frankly and i certainly understand -- any general councils here in the audience from the private sector? don't be embarrassed. raise her hand. [laughter] ok, i did not see any hands go up. many general councils, in my experience, they will often advise their board, often advise their leadership, hey, be leery about doing too much that potential he sets us up for liability. that's part of the function of the general counsel. one of the important things about legislation is this idea of liability protection. it's a way to help provide the private sector a measure of top cover, if you will, anchorage mint in interacting in both ways with the federal government -- encouragement in interacting in
3:12 pm
both ways with the federal government. let's see. daniel, you have already asked me one. eric l, are you here? how are you doing? how do you plan to the conflict cyber command's engagement with the private sector and other u.s. government efforts such as nci gen f nc3. i have people embedded in those organizations. secondly, for u.s. cyber command, we will be acting in support of others. we won't be the lead. the most likely scenario, when the dod provides capability through its import of steel.
3:13 pm
i believe the model in the cyber scenario would be very similar. through the department of homeland security. >> ok, robert asks, knowing how much workforce for cyber command, what education and development strategies are you excited about and what gaps are you most concerned about nationally? adm. michael rogers: excuse me, i am fighting a cold. among the things we have talked about, we have got to get to people at an earlier age. as you heard earlier recognition from educational efforts that are ongoing at the middle and high school, we are increasing our outreach efforts at the high school level. if you come out to fort meade
3:14 pm
right now, we will find very young people working as interns. my second day on the job, i am down at the cafeteria and ict w young ladies who look incredibly young to me, and i go back to the office and i said something like, how early are we hiring people? [laughter] they literally looked a little older than my youngest. the next day, i cbc gets young people and this time, i thought come in for a penny come in for a pound. i stop them and i said, how long have you both been working here? it turned out they were high school students, 15 years of old -- years old, working as part of the internship here. we expanded that effort are i am also interested in how we create a model. our model is a little different
3:15 pm
than when i'm out in silicon valley. what i'm talking to the private sector about, tell me how you retain, grow, assess, a workforce not only optimized for the day but could get you where you need to be tomorrow. the model for the private sector is the average employee will work for two to five years. often just bouncing around within. our model particularly on the nsa side is very different. once they join us, our retention is amazing. last year in 2014, the nsa overall retention was 98.7% of the workforce. we only lost 3.7% of the workforce. [applause] that is a great testament to the culture and the mission. a motivated bunch of men and
3:16 pm
women love what they do and have great respect for one another and are dedicated to the idea of how we defend the nation and how we do it within a lawful and accountable framework. but there is a flip side. one of the questions i asked was , in a 3.7 rate, it would take us 33 years to reconstitute the workforce. are we really comfortable that that is the right, long-term answer? i would like to get to a place where you can start with us and go out in the private sector and then come back. you can be in the private sector and come in turn with us for a year or two p are quite frankly, among the challenges we have been dealing with, i watched two cultures who think they understand each other and they are just talking past each other. i listen to my workforce and i say, so tell me what you think about the private sector and what it is doing. i would sometimes hear from them, the primary driver is money. they think they are changing the world through technology. your focus, our focus, is about defending the nation appear the two values are very compatible and very worthwhile.
3:17 pm
likewise, in the valley, to be honest, i will sometimes hear, you have the workforce we did not want to hire. i will say, interesting, because of someone leaves the organization, you hire them like this. do not give me this. [laughter] it is not a knock on either one, but i'm watching from my perspective, i'm watching two different groups, two different dynamics that do not fundamentally understand one another. one way we could help understand one another better is if there was more cross-pollination between us. i'm interested in trying to figure out how we create mechanisms from the private sector to work for a while and then to come back.
3:18 pm
i think it is very powerful for the future. with that, i rely someone is coming after me so i will take one more question and then close it up. herman, you will take us home. i pick -- i will pick a different one. it is not necessarily at that question, but not necessarily one i want to end on. no name, other than an address. rob. i'm sorry. did i get the name right? he asked what nsa -- what is and is a challenging problem on cyber defense initiatives? i do not have -- the biggest challenge, in some ways, is how
3:19 pm
we overcome some security challenges. it kind of goes to the other question i got. we have got to set this up so we could do it on a much more multinational aces. we are doing something's pretty closely with partners right now, part of the historic relation we have with one another. i'm interested in expanding it beyond that. as i said to you before, cyber to me is the ultimate team sport. not only a team sport to mystically for us, i believe is a nation, but cyber does not recognize geographic foundries. -- boundaries. national borders, to find solutions many times. we have got to come up with a framework that enables us to partner and work beyond those boundaries, beyond those borders. i am committed to trying to do that. with that, i thank you all very much for your time and attention and your willingness to engage. [applause][coughing]
3:20 pm
c-span is pleased to present the winning entries in this years student cam video documentary competition. it is c-span's annual competition that encourages the middle and high school students to in critically about issues that affect the nation. students were asked to create their documentary is on the theme the three branches and you . joseph sexton from middle school in new jersey focuses on the topic of immigration. >> if nature did not diversify we went to not be around. at the whole speech be extinct. it is part of our system, part of our need.
3:21 pm
not only as human beings but as physical beings. >> for more than 200 years our tradition of welcoming immigrants from around the world has given us a tremendous advantage over other nations. >> the new executive action the president announced last month is an extension of deferred action so that people can enter this country when they were children. then they grew up here and never became citizens. there are not deported from the u.s.. also something new called deferred action and parental arrival.
3:22 pm
the parents of children that were born in this country now have a chance -- it is not a pathway to citizenship. they have more time to get employment fees. >> the executive action has called -- rewarding those who flaunt our laws. owners opposed say our president is acting like a king. supporters of his policy say other presidents have done the same. even giving amnesty to illegal immigrants. it encourages diversity. supporters claim diversity is necessary to our country. a perfect example of how diversity was brought into society was the immigration act of 1965.
3:23 pm
it was designed to be inclusive. that law got rid of a quota system that favored western and northern europeans. and had a huge impact on my family and my community, jersey city new jersey. >> i wanted to go back to hometown korea. [indiscernible] >> my first day of kindergarten i did not speak a word of english. i definitely felt like an outsider. i don't think any kids knew anyone who was asian back then.
3:24 pm
>> i came and had to settle down my family. it was 1974i came here. >> my parents were all here except for my twin sister in india. >> for the first time ever there was a brother and sister. >> people can injure the cities outside their door. for jersey city, it's diversity is probably the biggest accident . >> we get together and we go to temple and we see each other. we celebrate our whole festival. ofwe have our own community.
3:25 pm
>> jersey city benefits greatly from diversity. otherwise we live in a little village with the same old people. bringing in new ideas, new people, new ways of doing things. it is great. >> i don't believe we ought to have policies that encourage diversity for diversity sake. after all the nation is owned by its shared culture. if the culture is so diversified that there is no shared culture then diversity has gone too far. >> any opinion is that it is a very great step in the right direction. they have been working hard, raising families. they have children's that aren't citizens going to school getting jobs, going to college. they are living the american dream. and this executive action helps them fulfill their dream.

73 Views

info Stream Only

Uploaded by TV Archive on