the bill says you must remove pii. i think it's when the eldest of the. we didn't originally agree with. primarily because we thought that small and midsize businesses that are not as sophisticated in terms of doing the removal might say instead of sharing the i'm going to sit this one out. we recognized that is a big issue and that one element of the bill that we find the messenger to compromise our ground. you might be interested to know we have been meeting with many offices in the senate to try to educate them about the bill. it is our number one cyber legislative priority. so i wanted to just think and say yes, ev do have a chance and women opportunity to pass the bill on the floor, please urge senator reid, put it on the floor. we think the bill deserves at least a shot at the. anyway, thank you. >> one thing we did to address early on privacy concerns is with regard to the definition of cyber indicator threats. and we narrowed the definition of it, and the focus is on really that serious issues of cyber threats. it's not able to be expanded from a

there was no loss of pii, or loss of data. this is a test network separate from the production network. so there was no lateral movement into the production associated with this activity. >> thank you. >> thank you. >> i guess i've still got more questions. but let me just make some statements, and then i'll ask a couple more questions. you know, miss speier has left, and it's unfortunate, because mr. lynch was here earlier. when this was all being said about, when are we going to hold all kinds of hearings, they forgot there's a committee, the financial services committee, and they've held hearings because they oversee the financial community, meaning home depot, target, these other companies they're referring to, these fall under that committee's prior oversight, because these were financial transaction related. my staff also mentions that the federal trade commission, the department of justice, the cfpb and fdic also are looking into each and every one of those. so with tens of millions of dollars, countless agencies and in

that there was no indication of personally identifiable information, also known as pii, exposure, and no indication of data exfiltration. additionally there's no evidence of any lateral movement within the network or further infection. we provided cms a report with the findings as well as mitigation recommendations. additionally, we were able to share indicators from our analysis so agencies, partners and stakeholders could better protect their own networks. we are in discussions with hhs to provide further on-site support. dhs remains committed to working with its federal and private sector partners to create a safe, secure and resilient cyberspace. i look forward to answering any questions that you might have. >> thank you. i will start with you then. when did you find out you were going to appear here today? >> i believe i was informed on monday. >> when did you begin preparing for today's hearing? >> when i was informed on monday. >> okay. has cert done a security testing of healthcare.gov? >> we were provided images from cms of the compromised test servers. we provided analysis -

there was no loss of data or pii. due to the separation of the network, this is stuff and separate from the production network. >> thank you. >> thank you. >> well, i guess i still got more questions, but let me just make some statements and then i'll ask a couple more questions. you know, miss spieer has left, and it's unfortunate because mr. lynch was here earlier, they were asking when are they going to hold hearings, and they forgot that mr. lynch was on the committee for home depot, target, those fall under that employee's site. my staff also mentioned the department of just, the fdic are looking into each and every one of those. with tens of millions of dollars, countless agencies and individuals looking into each of these. my question is, miss tavenner, who's been looking at you? mr. wilshusen, in a nutshell, one of the things you said, they didn't have strong passwords. somebody could put in a short password and not change it, is that correct? >> that's correct, we recognize several control weaknesses with hea

speaking of machines that are incredibly cool, i have polaris on tonight, pii.ou'll see much of the materials. talking about atvs. and then i've eaton. remember i said first good quarter in a long time. the hp thing -- like i told you, it's very cool. you've got to watch tonight. you've got to watch every night. >> every night. >> right. >> every night. >> every night. world series, they finish that thing yet? >> game seven. maybe a few people will watch. >> it's like the most important thing in america, american pastime. >> past being the key part of that. >> i like the royals. >> that's kjim cramer. they're still after me. get to the terminal across town. are all the green lights you? no. it's called grid iq. the 4:51 is leaving at 4:51. ♪ they cut the power. it'll fix itself. power's back on. quick thinking traffic lights and self correcting power grids make the world predictable. thrillingly predictable. where the reward was that what if tnew car smelledit card and the freedom of the open road? a card that gave you that "i'm 16 and just got my first car" fee