mr. hurd of texas. mr. hurd: thank you, mr. chairman. it is my hope the first thing they do when they wake up tomorrow is pull out the report that identifies areas they have problems with, they read their own i.g. report and take and start working to address those remediations. i've been at this job for 21 weeks, similar to mr. scott and one of the things you hear from people they are frustrated with their government. intentions are great. ms. archuleta you said at the beginning that federal employee status is paramount and i believe you believe that but the execution has been horiffic. intentions are not enough. we have to have execution. this is the thifpk that scares me. let's start with you, ms. archuleta. did the hackers use a zero drive vulnerability to get into your network? ms. archuleta: i think this would be better answered in a classified setting. mr. hurd: i hope everyone should know even in the public and private sector. i spent almost my whole life in the c.i.a. keeping secrets,

mr. hurd: if it was a zero dave wohl nerve ability, i hope everybody should -- zero day owner ability, i hope everybody is notified. what i heard is einstein detected the breach. my question is, how long did somebody have access to these? why did it take that long to get it into einstein's system? has that been promoted to every other agency using einstein? dr. ozment: we loaded it into einstein immediately. both to detect and look back through history to see if any other traffic back in time indicated a similar compromise. that is how we found in intrusion into opm related to this incident that led to our discovery of the breach of the personal records. we also put into einstein three so agencies would be protected against a similar activity moving forward. we held a call with all the federal cio's and asked them to search their networks. mr. hurd: you talk about legacy systems. the difficulty of protecting those. what are some of those? what programming software is used to develop them? ms.

mr. hurd: mr. speaker, i move that the house suspend the rules and pass h.r. 1626, as amended. the speaker pro tempore: the clerk will report the title of the bill. the clerk: h.r. 1626, a bill to reduce duplication of information technology at the department of homeland security, and for other purposes. the speaker pro tempore: pursuant to the rule the gentleman from texas mr. hurd, and the gentlewoman from new jersey mrs. watson coleman, will each control 20 minutes. the chair recognizes the gentleman from texas. mr. hurd: mr. speaker, i ask unanimous consent that all members may have five legislative days to revise and extend their remarks and include any extraneous material on the bill under consideration. the speaker pro tempore: without objection. mr. hurd: mr. speaker i yield myself such time as i may consume. the speaker pro tempore: the gentleman is recognized. mr. hurd: thank you, mr. speaker. i rise in strong support of h.r. 1626. call me crazy but it just doesn't make sense to me to hav

mr. hurd for five minutes. >> thank you mr. chairman. my mama always told me you can always find the good in any situation. let me try to start off with that. dhs caught them caught the problem. that's a good thing. when they were engaged, we found it. wish it was sooner, but we caught the problem so that's good. i also got a letter from the chief information officer of opm. dear mr. hurd the u.s. office of personnel management recently became aware of a cybersecurity incident affecting its data and you may have been exposed. we have determined the data compromised in this incident may have included your personal information such as your name, social security number date and place of birth and current or former address. i know ranking member cummings and mr. micah were talking about how could an adversary use this information. i spent nine years as an undercover officer in the cia. if it was the chinese, any federal official traveling to china, former official, someone there, is a subject of being targeted for elicitation of information

mr. hurd for five minutes. >> thank you mr. chairman.ma always told me you can always find the good in any situation. let me try to start off with that. dhs caught them caught the problem. that's a good thing. when they were engaged, we found it. wish it was sooner, but we caught the problem so that's good. i also got a letter from the chief information officer of opm. dear mr. hurd the u.s. office of personnel management recently became aware of a cybersecurity incident affecting its data and you may have been exposed. we have determined the data compromised in this incident may have included your personal information such as your name, social security number date and place of birth and current or former address. i know ranking member cummings and mr. micah were talking about how could an adversary use this information. i spent nine years as an undercover officer in the cia. if it was the chinese, any federal official traveling to china, former official, someone there, is a subject of being targeted for elicitation of information about

mr. hurd for five minutes. >> thank you mr. chairman.y mama always told me you can always find the good in any situation. let me try to start off with that. dhs caught them caught the problem. that's a good thing. when they were engaged, we found it. wish it was sooner, but we caught the problem so that's good. i also got a letter from the chief information officer of opm. dear mr. hurd the u.s. office of personnel management recently became aware of a cybersecurity incident affecting its data and you may have been exposed. we have determined the data compromised in this incident may have included your personal information such as your name, social security number date and place of birth and current or former address. i know ranking member cummings and mr. micah were talking about how could an adversary use this information. i spent nine years as an undercover officer in the cia. if it was the chinese, any federal official traveling to china, former official, someone there, is a subject of being targeted for elicitation of information ab

subcommittee, mr. hurd of texas for five minutes. >> thank you, mr. chairman. it's my hope that every agency head and every cio of these agencies are listening or watching or will read the testimony of this event. and that the first thing they do when they wake up tomorrow is pull out the gao high risk report that identifies areas that they have problems with. they read their own ig report and take and start working to address those remediations. you know, i've been at this job for 21 week similar to mr. scott. and one of the things you hear from people, they're frustrated with their government. intentions are great. ms. archuleta, you said at the beginning that security of federal employee status is paramount. i believe you believe that, right? but the execution has been horrific. you know intentions are not enough. we have to have execution. and this is the thing that scares me. so my question -- let's start with you, ms. archuleta. did the hackers use vulnerability to get into your network? >> i think that would be better answered in a classified setting. >>

subcommittee, mr. hurd a texas for five minutes. >> thank you, mr. chairman. it's my hope that an agency head and every cio of these agencies are listening or watching or will read that testimony after this event and at the first thing to do when you wake up tomorrow is pull out the gao high risk report that identifies areas that have problems with they read their own ig report and take answer working to address those radiations. i've been at the chopper 211 weeks, similar to mr. scott. and one of the things they are from people, they are frustrated with their government. one, intentions agree. ms. archuleta you said at the beginning security of federal employees that is paramount and that's why but the data is paramount. i believe you believe that, right, but the execution has been horrific. intentions are not enough. we have to have execution. this is the thing that scares me. so my question, let's start with you, ms. archuleta. did the hackers use zero vulnerability to get into networks? >> i think that would be better answered in a classified setting. >> w

mr. hurd for five minutes. >> thank you mr. chairman.my mama always told me you can always find the good in any situation. let me try to start off with that. dhs caught them caught the problem. that's a good thing. when they were engaged, we found it. wish it was sooner, but we caught the problem so that's good. i also got a

recognize the gentleman from texas who's the chairman of the subcommittee that we have at the oversight mr. hurd for five minutes. -- >> with opm, i'm concerned. today's hearing is just another example of the undeniable fact that america's under constant attack. it's not bombs dropping or missiles launching. it's the constant stream of cyber weapons aimed at our data. from private sector invasions to military secrets our enemies are attempting to rob this country on a daily basis. and unfortunately they are succeeding. the worst of these cyber attacks are not coming from the caves of afghanistan or syria, but from air-conditioned office buildings in china iran and russia far from battlefields. these hackers work with impunity knowing that their actions have no consequences. this is not only a question of how we can protect our networks and data, but of how we define the appropriate responses for digital and digital attacks. this is one of the questions i've been asking for years and i've continued to ask in my role as chairman of the information technology subcommittee. it's no secret that feder

>> so, as mr. hurd stated social media's out there, it's develop luminous, it's volume.rough thousands of individuals on social media and find all of the noise out there identifying the signal. it's a volume piece. you know looking at social media requires a different business process that we do things with going from there to finding a credible threat, it's a very difficult process. >> yeah, i mean it seems like it would be. we've been talking this whole time about online communications online radicalization. is there any physical presence of either isil or al qaeda doing face-to-face recruiting here in this country? >> so, i would say we don't -- we have, of course, a number a small number, of returned foreign fighters. we have individuals who have been overseas and return to the u.s. where they are, who they are is an intelligence force. our best estimates we don't have isil sitting in the united states. we've got individuals who have taken up the call to arms based on isil's messaging. >> right. but not everyone who has gone and come back becomes a recruiter. >> corr

cummings talking about vulnerability of government contractors and the questions of my colleague, mr. hurd regarding whether comes that have government contracts must keep the same level of security and care that the opm or other agencies would have to in terms of preparing for cyber attacks. mr. gianaughty. i have a letter from 2014. the the letter says the federal agencies had the failure of the company. i wanted to ask you some assertions in that letter. the kritd cal attack cyber attack only flowed in one direction, from you uses to the federal government. >> the question earlier about the shared responsibility to notify from a contractor to the government and government to the contractor that is correct. >> you're saying in terms of -- >> i'm suggesting that we were required and obligated by our contract to notify opm that we had an incursion, which we did immediately. in the discussion held earlier opm recognized they did not notify usis or i believe, key point of their intrusion of march 2014. >> so in terms of this cyber defense information, was it one way or did it go both ways. >

mr. hurd is recognized. >> thank you, mr. chairman, ranking member from existing.i think a number of these issues we can talk all day long about that and so we're packing a lot in it for a short period of time. my first question is to mr. mulligan and ambassador kennedy. talk about the community engagement exercises and engaging credible voices throughout this community. how do we make it bigger, accelerated those projects? >> so we've been developing a partnership community awareness briefings and we just been moving it out slowly to ensure we have a degree of success we've had some success in that and i were trying to train the trainer so we can get into a situation where we're propagating or private across the communities to go back to some observations that been made it really is at the community level we need to have this success. it also we need to have i think as the ranking member said, levels between government and local in a lot of instances particularly family members agenda people are reluctant to engage any sort of authorities and we need to try to fin

hurd. cynthia is one of the six women, nine people killed at the church last night. mr.i am so, so sorry for your loss. tell us about your sister. tell us about cynthia. >> cynthia was the matriarch of the family. both our mother and father are deceased. in terms of the glue that kept the family together she was a 31-year employee of the charleston community school district library system. she loved books. she loved children she loved her community, she loved her family and she loved her god. >> mr. graham how often did she go and do bible study? >> emanuel was our home church. we were born and raised in that church baptized in that church. my mom sung in the choir. we were regular church-goers. i was not surprised she was there that wednesday night. >> tell us who she leaves behind. >> her husband, steve, who is a longshoreman so we're trying toigts him home. he's in saudi arabia so we're trying to make arrangements to bring him back home. she was four older brothers, rho beenen leroy, donald myself and a younger sister jackie. a host of family and friends and a communi

mrs. middle donton doctor her father was one of his closest friends. he was an elder in the ame church. and i will be speaking this saturday at the service of cynthia hurd. he was she was one of my daughter's best friends, a librarian like my wife. it's going to be tough for me on saturday. >> to lose so many friend and so many people in this community in one horrible massacre. it's really obviously impacted permanently the town of charleston. what do you think about what's happening today where senator clementa pinckney will be lying in state here. and governor nikki haley, there is a legal loophole where temporarily she could take down this flag that flies over our shoulder. is that important to do today? >> i think it is. i would say to the governor and everybody else there is precedence for this. bob mcneal when he was governor took the flag down one time. when he was called on it he said it was being taken down for repairs. so i would hope that would happen here today as well. >> what do you say to the 73% of south carolina -- this was a poll last year 2014. a poll has not been taken since the massacre. back then they felt that it was a part of the

hurd found that grace. suzy jackson found that grace. ethel lance found that grace. the dr. middleton found that grace. sanders found that grace. daniel simmons, sr. found that grace. mr. their lives, they've not passed it on to us. may we find ourselves worthy of that precious and extraordinary gift. as long as our lives endure may grace now lead them home. may god continue to shed his grace on the united states of america. >> a lot of people asked me this weekend what it was like down there. they said, hey, nothing personal, but i don't sit in front of the tv set for three hours to watch a show every day. but i had quite a few people say, i sat in front of the set to watch all three hours. what was it like? i said it was really like nothing we had ever covered. and it was like nothing we had ever covered because it was almost like a church revival down there. as you said from the very beginning, it was the families that led by example. they showed remarkable grace, remarkable forgiveness. and it became an example for the community and for the state, for the nation and the world. we've grown up certainly over the past 20 30 years, with one bad example after another ba