ms. hoffman. you seem to say as though -- the impression that i get is that you seem to feel as though this is -- okay, this is a step in the right direction. but it's narrow. and what the administration is looking at is a much broader view, they've taken a more universal or broader view of this particular issue. if you were to overlay the administration's efforts, this bill, this proposal, and the grid act, what would we see and what would you see as being some of the most significant differences? >> some of the administration's proposed discussion drafts focuses on several things. it looks at criminal aspects with respect to criminal charges and enforcement. it looks at voluntary information-sharing. it looks at voluntary assistance. so it's building a public/private partnership to actually build capabilities and support to the industry sector which is critically needed at this point in time. it also looks at the ability to develop plans, risk-based plans. now, most of the critical infrastructur

ms. hoffman. you seem to feel as though -- the impression i get, is that you seem to feel as though, okay, this is a step in the right direction, but it's narrow. what the administration is looking at is much broader view. taking a more universal, broader view of this particular issue. if you were to overlay the administration's efforts, this bill, this proposal, and the grid act, what would we see and what would you see as being some of the most significant differences? >> the administration's proposed discussion draft focuses on several things. it looks at criminal aspects with respect to criminal charges and an enforcement. it looks at voluntary information sharing. it looks at voluntary assistance. it's building a public/private partnership to actually build capabilities and support to the industry sector, which is critically needed at this point in time. it also looks at the ability to develop plans, risk-based plans. most of the critical infrastructure definition and the development of risk-

ms. hoffman, i will recognize you for a 5-minute opening statement. and i would just point out that there's little devices on the top of the table that has the red, green and yellow light, and when it turns he red, we would like maybe having you thinking about coming to an end but we won't hold you strictly to that. ms. hoffman, you're recognized for five minutes. >> good afternoon, mr. chairman, members of the committee, i would like to extend my thanks to the chairman and esteemed members of the committee for inviting me here today to discuss cybersecurity issues facing the electric industry as well as potential legislation intended to strengthen protection of the bulk power system and the electric infrastructure. ensuring a resilient electric grid is particularly important since it is arguably the most complex and critical infrastructure that others depend upon to deliver essential services. the department of energy's office of electricity delivery and energy reliability supports the administration's strategic comprehensive approach to the cybersec

ms. hoffman. you seem to feel as though -- the impression i get, is that you seem to feel as though, okay, this is a step in the right direction, but it's narrow. what the administration is looking at is much broader view. taking a more universal, broader view of this particular issue. if you were to overlay the administration's efforts, this bill, this proposal, and the grid act, what would we see and what would you see as being some of the most significant differences? >> the administration's proposed discussion draft focuses on several things. it looks at criminal aspects with respect to criminal charges and an enforcement. it looks at voluntary information sharing. it looks at voluntary assistance. it's building a public/private partnership to actually build capabilities and support to the industry sector, which is critically needed at this point in time. it also looks at the ability to develop plans, risk-based plans. most of the critical infrastructure definition and the development of risk-

ms. hoffman? >> i would just add to that, joe adequately talked about some of the hardening type activities that could be done. the other thing to keep in mind is current state of heal from the transformers. you can do hardening, but if the current health of the transformer is not where it should be, there won't be vulnerabilities. assessing the current health will imct towhat level of deterrent or capabilityhey will have to withstand any geo magnetic solar flare. how much do we want to harden against? are we talking about 200 amp type thing or what is currently tested up to an 80 amp? the other thing is, do we have enough manufacturing capability of transformers in the united states? as we look at it, hardening is only one solution. there are several sets of solutions we must keep in mind. >> let me follow up. building resilience into the system to provide for rapid return of functionality is another alternative to hardening. we need to be ale to to be sure we can, from a department of defense me