Transcripts For CSPAN2 Key Capitol Hill Hearings 20240622

They have sensors equipped on them so they can detect vibrations. Using vibration detection, you figure out when a bridge is likely to fail and intervene before that happens. This has huge implications. We saw in minnesota the collapse of the bridge there. Recently i10 outside of los angeles. This is a huge problem in the United States. Using connected devices to get realtime information about which bridges, highway structures should be replaced sooner. I pressed the button everyone told me not to press. I press it again. Hows that . The other thing transforming homes. This is really interesting way. People are familiar with the net thermostat. Now net has whole line of devices. They have along with that, my favorite is a, they have a smoke alarm and Smoke Detector and Carbon Monoxide detector. This is not just a Smoke Detector connected to to the internet. Why does that even matter right . Working together with the rest of your home system, if there is fire detected in your home for example, it knows, maybe i should turn off the air conditioner, blowing air into a flame is bad idea with a fire. These small innovations like that actually have big implications for housing and safety. On the left this is device put out by elkin they have a whole line of smartphone devices. This one is around detecting specifically, specifically detecting water usage in your home. If you look on there, there is a little device on there, detects vibrations in your homes pipes. When you use different, you know, if you use the sink in the bathroom versus the toilet, versus a shower all these have different vibration signals. Just by listening to the vibrations this device actually measures all your water usage in the entire house. It can tell you things like if you have a leak. If you have a vacation home, for example, and youre away from it most of the year you might want to know, is the water running . Is there a problem in my home . This has big implications for, you knowing that, having peace of mind but for insurance. When you look at, you know, what insurers are paying out, water damage is one of the top claims. So if you can start measuring this, you start reducing risk, you start reducing costs for individuals, you can changing a lot of how Industries Work and how we live. Finally on the right, we have this is the smart light bulb from phillips. One of the interesting things from this, you can control it just from your smartphone. You can use these lights, theyre colorful, to signal thing to you. Part of the internet of things is having feedback signals. Maybe you have a light turn a different color when it is raining outside. The light turn a different color based on some kind of a signal you have set up so it alerts you. On top right we have amazon echo which is a new product. This is how ubiquitous connectivity were seeing in many homes. Finally the the internet of things is transforming people. I want to highlight really interesting products here. Glow caps is a smartpill bottle. Basically lets you know when it is time to take your medicine. This is very important for a lot of people. Medication is one of the big problems in health care and fixing that device is two reserve tables. Either one works. I will call you up. Not that big of a room so. You may want to get wired up first. All right, as i say i hate to interrupt good conversations. Cpe stands for continuing professional education. I forgot my book i was going to give out. There you go. Well talk a little bit, we talked a lot about possibilities, what can happen and cool things that can go on. Weve also heard that, is there bad people out there and occasionally they do bad things . And for all the Government People who know all your information is out with the chinese you know all too well about this but lets talk about how you at least have a mindset how to protect your sell. And im on the wrong page. I can do this one. Mark is the acting director of federal Network Resilience with dhss office of Cybersecurity Communications with the National Protection and programs directorate. Mark, you fit all that on business cards . Wow. One of those eightbyten. Mark nitenger, with dhs. Thank you. Thank you. Actually continues on second part or second half of the business card. Seems every time i turn around there is another aspect being tied to it. Good morning or good afternoon, or good morning still. Good. A bit chilly if here. You think so . So basically what ive been asked to do is talk about what dhs is doing in taking a look at how we are supporting agencies, Government Agencies in regards to identifying and mitt fating threats. The focus today, talking to is really about federal government. Folks here and others, dhs, actually supports from cybersecurity aspects, private sector. All the critical economic sectors of the government or the country as the economy as well as state, local and tribal. Many things i will be talking about today are actually also available via federal, state, local, tribal Government Agencies. On the federal side, when we look how the agencies are interconnected, strategic activities that basically the governments put in place, specifically dhs, what i think about this presentation, i think, well, i have a diagram, this is only diagram you will see. Not sure, if you really want to look at my face or sort of black that out, it is fine, but basically you have three circles, basically three severals of strategic activities were currently involved with. They would include first being programs. These programs dhs is putting in place across. The second is the metrics, how are we measuring success and how were encouraging success and the third is communication. Communication from awareness perspective but awareness from people sharing information as well as machines sharing information. So the first part of that circle, intersection is really weird protection, that is supporting the federal agencies. First part of the program is a number of different programs, those in the government here im sure heard many times since ive presented on it about 350 times so far, cdm is one. Anybody here heard of a cdm program . So the cdm program, they have mitigation. It has three different phases. Basically serving the 8. 7 98point of the federal government. This is closing gap on agencies as far as hardware and Software Management and Configuration Management and node management. Across the management, 98. 7 of the services will be receiving those services very shortly in with regards to having, increased capacity to to assessing other devices on your network. I had the opportunity to work across 125 agencies. Im one of the few people in the federal government who knows where all the agencies are located. Basically through that, one of the things that really resonated there are a lot of folks that have poor understanding what is really on their network. Phase one is cdms. Phase two are the cdms programs related to people, credentialing, privileges things of that nature. That is accelerated to move throughout the government, primarily being driven by cyber activities that occurred over last several months. This is going to encourage and support agencies taking a look how they are going to provide authentication through cards and things of that nature that is being accelerated to support the agencies. Third part of cdm dealing with events. This is thing that is new is, in regards to being brought to the table. In other words sensors, service, things of that nature but that area is really going to focus on the events. What is happening on the network . You have who is on a network, what is on the network but whats happening on the network between the trusted and untrusted activity thats going on. So that is cdm and thats wellunderstood and out there in regards to the programs. Second program is einstein. There are three parts to sign stein. Einstein one focused on correcting information. The second part then, in regards to detecting it and third is blocking. So einstein accelerated for the third part of einstein is really looking at blocking the malicious activity and were in the process now of working with many other agencies to have that in place. Einstein i and ii is in the majority of the federal government. Cdm, you have einstein and the third is our tick activity. Looking at at consolidating trusted internetconnections, bringing down those numbers, so basically you have less exposure outside to malicious attacks. So tic, einstein, cdm are three primary programs dhs is involved to address a key element of trying to close those gaps as well as dealing with Malicious Behavior that is occurring supporting all the federal government. The second part is metrics. Great to have these things in place but how successful are they and how can we encourage agencies to put additional controls in place and how are we at measuring their impact . So on the metrics side there are several activities occurring. One is dealing with the cyber spring activity that omb initiated going back, lets say, would have been the late june, july time frame. And in that activity one of the things that we observed is that you can actually move rapidly in government. Ive been in government over 35 years yet you can move fast in government if you have you know necessary support and understanding of what is going on in your environment that it is important that you do something. So the cyber activity supported about seven working groups but the focus that came out of there, that was being measured literally on daily basis literally with calls to the cios and monthly basis with their desk sets, dealt with hvas, or high value assets. How do we identify what a high value asset is and what are we doing to protect that . And to protect that are you on schedule . That is main thing that came out of the cyber spring activity, that cios were responsible for reporting on daily basis. With regards to taking who has a piv a card from privileged and unprivileged and why. What assets do they have and why do they have it . Making sure that folks that dont need it dont have it. So methods put in place by others at omb saying we need to address this in timely fashion. Again, daily calls. The third, the third area dealt with two factor authentication and accelerating that. Another one dealt with making sure that everybody does have a cdm in place and receiving those services as well as accelerating einstein. Making sure thats in place. So there are metrics that were put in place were in support not only of the programs but also key areas of priority that were identified as critical, critical cybersecurity areas that we needed to address as part of closing that loop. The third area dealing with communications. Communications from a machine perspective is as well as people perspective. From a machine perspective with u. S. Cert making sure the information is available to the departments and agencyies through and information moved through the einstein program. Another element in regards to communication along that line is also the activity that is being put in place across departments and agencies as part of the cdm program. Because that will play two roles. One is, allowing the agency to be able to see what is on their network that could have a visual perspective of that. A prioritization of those issues so that you can bet they will distribute your security resources. But also from taking a look at trends going across entire governments, being able to push down some dashboard to the Agency Dashboard capability of raising the risk scores or Risk Management awareness so that youre aware as an agency doesnt matter if youre an agency of five people or an agency like va. But youre aware that this is trending across the government and you should be, doing something about it. Right . That information will be coming from the federal dashboard down to the Agency Dashboard. Those are some of the machine sharing. What is interesting i have been a cio in five different agencies. Just shows i cant get a job. Basically the people interaction. What we saw as part of the activity of the cyber sprint activity that was occurring, is that much more communication going on between the system, the cio, cios heavily dependent upon the systems what is going on there. And cios need to be aware because there is also an increase in communication path from the deputy secretary. When your deputy secretaries meet on monthly basis and basically becoming more responsible for cybersecurity they want to be aware what is happening in their environment. So that communication is open as well. In fact see the point where one of the, one of the additional metrics that we did put in place through binding operation or directive that dhs put out to the agencies for critical vulnerabilities you would think when youre putting out a binding operational directive, the secretaries and folks wouldnt be happy about that but we actually had two secretaries call jeh johnson, our secretary, to say thank you. Thank you for putting these binding operational directives out because it really forced our awareness and forcing this communication. So the communication between the deaf 2nd and cio is defsec, and cio, having their hands tied behind their back, responsibilities and funding and starting starting with, taking a front row seat. Communication is being supported by the defsec and cio. One other area were also emphasizing supporting agencies from the cio to the mission. When youre putting cybersecurity capacities in place often times the Mission Owners say, well, this is starting to inhibit me being able to do my job. I dont understand why youre doing that. So bringing that awareness to the Mission Owners is a key element of another activity were involved with because cybersecurity, addressing cybersecurity is everyones responsibility. Especially when we talk about how everybody is so interconnected. You know, there was a conversation i think i caught a tail end earlier in regards to state and local and federal government. The thing about how many interactions are between state and local government and federal government. I was a cio in new york for 20 years. Worked for the deputy secretary of virginia for technology. So i have a pretty good understanding of interactions between states and the federal government and thats increasing as more and more activity is being shared between the state and federal government. So one of the approaches that were taking in regards to addressing this internet of things through the federal government is also making sure that on the stateside they also have access to similar type of capabilities and programs. Such as like the cdm program where state, local, tribal, can actually access and leverage the bpa for cdm. There is a number of other activities that are that dhs directly involved with the state and locals to support cybersecurity through our activities. So we look at it from the perspective of how to address internet of things, interconnect tivity of the federal government from three per speck tis. Doctor perspectives. Programs were providing and putting forward, metrics how were encouraging that success and basically communication. That is the approach dhs put in place. I guess for ten minutes i have i go into wide detail of all that. I wanted to go into perspective of key elements in those areas. The intersecting point were working with agencies on and omb with that type of support. With that im done. There will be questions at the end . Well do more questions at the end but as folks are thinking about the internet of things world and of course i mentioned earlier on, we live in a world where target got hacked through an airconditioning system for gods sakes. Yep. So we hear about all of sudden our toaster being connected and seems kind of scary. Are they going to attack us through our toaster . How do you begin to deal with the world of possibilities . How do you kind of do some Risk Management around that . The key element there is from very basic is understanding of what is happening on your network. And that is the first first emphasis we put in place on the cdm program. What is the hardware . What is that software . Because awareness, the level of awareness is all over the place. So now, at least if youre aware of what is going on there, then you start looking at policies how to insure that you keep aware. Then you take a look at, that is in essence how you track malicious threats may be coming through and able to address that in timely fashion, there is all tools were putting in place at least across government. Part of that is when we look at all the different type of connectivities outside of the federal government, right if thats where we need to, take a look at what is, what are the policies allowing that to occur and then basically how are we engaging if we want to have the connectivity or not. Sharing of information what were learning with regards to threats what is happening along with the threats. That is key element dhs involved with across the federal government providing those. One time, you know the rates were usually provided to those people that only were at the operations level. Awareness is all the way up to the def sec level. Were talking about where the activities are occurring and what are those threats, we have it up to a def 2nd sec level, to have understanding. Full range of people involved, addressing those cybersecurity threats. Many more questions. You will stick around a couple minutes . I am. To join the roundtable. Well get to some of those. Mark, thank you very much. We appreciate that. Let me bring up, im sill on the wrong page. [applause] feeling temperature more to our liking . We can actually feel our extremities, thank goodness . We have the associate director of Cyber Physical Systems Programs. He is with the National Institutes of standards and technology and have focused on this stuff for a while now. The last time he worked in government he spoke to us. So were happy to have you back. Thank you, chris. [inaudible] a lot is happening with multip microphones. Thank everyone. Good morning. Thank you for being here and sitting here to listen to the presentation that i have. I work at the associate director of Cyber Physical Systems Program at nest. For those not familiar with nist, it is start of department of commerce. It is u. S. Federal agency and works on standards and measurement sizes. It is one of those institutions in federal government that are specialized in science and engineering, specifically i think interoperability, which leads us to internet of things. So the, how many of you have heard about something called the cyber physical systems, raise your hands . Okay. Very few. That is good and bad. Bad thing obviously i didnt do my job in promoting my title. Good thing, that there is a lot for you guys to learn from this presentation today. Im going to talk about iot, internet of things, at the same time, cyber physical system as little bit. That is really iot on steroids like i will call it. Iot with more focus on system control, not just monitoring, monitoring plus system control with robustness and resiliency. Think of any like basic critical systems, they are part of iot as well, but at the same time we call it cyber physical systems that means a lot more science and engineering to make sure they are safe and secure. So, this is kind of like my definition of iot. It is essentially an ecosystem. By the way when you talk about iot, i know you guys know what it is. At the bottom there is hardware layer actuators, sensors, chips, radios. You can kind of touch. On top of that there is communication layer. Bluetooth, wifi, longrange, shortrange communications, everything that can connect these hardware. A lot of people think it is only two layers, that is what iot is. That is not necessarily correct. There are two more layers more important in the whole Iot Ecosystem than bottom layers. There is software and Data Analytics layer. It collects data. Data doesnt have a lot of value. You have to extract useful information from the set of data. When that information is extracted and can be shown to be valid we call this whole iot system has a value. That is what the analytics layer does. Onp to of that is the most important layer, service. You have the information and data what will you do with it . If you have collect and put in a database, it is not that much good for us. You have to take action. The action could be human in the loop actions. A human makes decision based on data or autonomous action. So, smart cities, why smart cities . If you look at all the iot applications theyre talking about, transportation, health care, energy, everything, there are really factors or stuff we always see in the cities. This is the Playing Field that you can see all these different applications actually provide real benefit. So from smart city perspective they actually, they pretty much categorize smart cities in two layers, bottom infrastructure. That is what hardware and communication is on top of applications. What is missing in this diagram is the human factor but, the application, human factor is in there. You cant not do any smart iot without human factors. So opportunities for smart cities. We talked about iot but really the question there is, what is the real benefits of iot . We can collect all this data but unless we take action and which have to take action meaning somebody has to take action with some infrastructure. That is where the smart city comes in and issue with the smart city is that it is very fragmented like iot still. Every city does literally its own thing. It is not to scale or to business because they can not resell their product from one city to another city. Important pieces is the rep flickability, scalability and sustainability. We need to find those kind of models to really catalyze the deployment of iot and when i say catalyze, you can not just pump into money in this. You have to have some goal and directions. You have to find the right model that creates a real benefit for us. Real benefit, without the real benefit, these iot smart cities, whatever you want to call it will not be sustainable, okay . And that ace the key and thats the theme that i have all in my program in all these presentations. So im going to go backwards. Okay. Thats good. So this is instead of each city doing their own thing, why dont we bring in multiple cities and Technology Innovators including companies and universities and lit them, help them take the issues that can create a real tangible benefit to us from the cities. Cities know them very well. Cities know what their problem is. They just dont know how to solve those problems in manner financially viable and sustainable. Technology providers have a lot of technologists. A lot of times when they think they are solving some problems, the problem may not be the real problem the cities or us really feel. So we want them to group in clusters then with specific topic as andres the problems. How you run the problems, around the september time frame and culminate the time frame. We have nist and the partner with to bring in all the different players from different cities and help them identify the problems they want to address. Again, replicable scalable, to have tangible benefits. In that process last year we had private sector partners like the corporations they listed here. And more than 200 corporations, about actually, 250 corporations and organizations participated to address the issues of smart cities using iot and other technologies. So we had about 50 cities participating. Cities are very important. We partner to show their solutions this is no different than any trade show you go to. We had 50 cities around the world, including large cities like new york city, chicago, san francisco. Also smaller cities like amonite . How many have heard of that city . It is pretty small town but they are a smart city. Netherlands, italy, spain, israel, indonesia, they all gathered together to address their common problems and show off their existing solutions that can be replicated to other cities. I give you a few examples. Im trying to see being, i have two more minutes. I have 250 teams but only show a few of them. This is from new york city. This is comes with a couple other companies which is google has invested in some of the partners that participated here. It is Pretty Simple concept. Replace a pay phone booth, which is not really used these days, with a huge wifi hot spot which gives free wifi access to citizens, then generated revenue. Like sprint put up there. They are expecting as i heard last time, 700 million Revenue Generation for next 10 years. Thats where sustainability is because you generate revenue. That is rep flickability, this is not just one block but cover the whole city. We provided to u. S. Army to pick up soldiers in battlefield without putting other soldiers at risk driving ambulance to the field. Now the military is being adopted. Typically the application right now is the elderly care, when you have elderly home and a lot of times these folks have hard times just coming to the bus station because it is hard for them to walk. So why dont we have shuttle automatically goes to each house of the elderly to pick them up instead of when they go to the hospital. That is application. Being deployed in several cities. London is actually deploying it right now. Scaled projects on top of, bottom left is in a county. Theyre doing a bunch of stuff. This is a unique case. The city instead of passively just participating in the iot infrastructure, they actually, proactively work with the companies to bring in different solutions. On bottom right is portland working with intel and several other cities in air quality monitoring. The question is, theyre expensive. Each air quality monitoring station that is professional grade costs about 60,000. That is not going to scale, you will not have a 60,000 station on every corner of your street. You knee lower costs but good enough sensors that can show granularity in the process. So these culmination of the last years programs happened on june 1st at National Building museum as you can see. We turned this museum into massive exhibition hall and presentation stages. We had 64 teams from municipal governments. We had highprofile folks like queen and king of netherlands. Also tony foxx, secretary of transportation give keynote and white house nsf. We had 1500 attendees and more than 50 Media Outlets from around the world. This shows you pictures except on bottom right, with tony foxx, the top right is the king of netherlands. So we are planning the next challenge this is not end of story. But huge success. We know the model works. Companies and are looking for issues they can address. So we are launching the next challenge and official announcement will come soon. And the focus this time will be more on the measurable and quantifiable impact. Lets say we can reduce a traffic jam. That is great. So how much . Can you reduce the commute time by 15 , for example . Can you show that . Can you prove that . Once it is proven suddenly now you see a real Business Model happening. Cities will be more interested because this is proven with actual numbers. Then all of these corporations can, it is a lot easier for them to talk to cities because now they have real hard data that things we can solve. Deployment, we talk about this all the time. Deployment, deployment, deployment. Having a pilot and testing it is interesting but until it comes out of the lab and being widely deployed andscapable and rep flick kateable and it will not impact your lives. It is important to have common understanding of what smart infrastructures are. There is more information. I will stop hire. I will be happy to take any questions. Wasnt ready. Quit too quickly. In the next phase of this, because youve been through a lot of phases of this, right . Yes. I needless sons learned from the Smart Cities Program so far. What is your big takeaway . Smart Cities Program the big takeaway is this. The market is huge and opportunity is huge. And everybody is trying to solve the problem in their local scale and you need to work with interagency collaborative. It is very important Public Private part farship is very important. The reason because iot by definition is cost cutting technology. So, transportation, energy and water, they have that agencies have to work to adapt what youre trying to achieve. Not that im ignoring you people. He will come back in couple minutes. We have one more and then they all come back and we can have a full conversation. Thank you very much. Thank you. [applause] i had it right here. There you are. Peter romnus, Cybersecurity Solutions lead for cisco public sector. There you are. Hi, peter. Hello, good morning. Good morning. So i am as they mentioned i am the last speaker before our town hall session. So i have the distinct opportunity to kind of such things up and to leave you guys with some with good thoughts where we go on the internet of things. I would like to start by talking about, and this really sums things up, there are really three things you can gain when talking about the internet of things. You can do things more efficiently. You can gain Operational Efficiency and hopefully gain some money. If it is secure you can create new things your citizens and your customers will be happy with and will like. And then you can improve the quality of the delivery that you are doing. So those are, if you look at all of the benefits of the internet of things, these are the, if you sum them up, you get these three goals. Sorry, let me go back. When you think about the internet of things, in industry and government we think about industrial controls, we think about lighting, we think about parking. Those are all very good and can save us money and increase efficiency and do those things. But our users are thinking other things. Our users are thinking about their senator phone, their smart thermostat, their smart toaster if you will and all the many devices they want to bring and to our users this has become very important. And especially when you talk about the new workforce that is entering our businesses and our government, the younger generation, are coming in with these preconceived notion that all of these things are going to work. And in fact, bit com did a study where they surveyed fourteen to 29yearolds, they asked them, i cant imagine life without . The answer was mobile phone was 97 . Internet was 84 , a car which was very important generation, becoming less important. And most telling of this survey, is that their current partner is only 43 . So it is very important. And of course all of these devices are growing. We see it is growing back in about 2009, we had the Inflection Point where there was at least one device on the internet for every person in the world. By 2020 were estimating 50 billion devices on internet. It is starting to look like that number may be too conservative. Adoption of this internet of things and things on internet has grown faster than any other technology that has come along in our lifetime or in previous lifetimes too. So with that come as challenge. We have all the devices out there. And by doing that, there are more places the bad guys can attack. So there are more devices out there, but not only more devices theyre in more places. You have to worry about all those places. Additionally with all the different devices there are a lot of different ways to find a weakness and get into the device. When you add that to the fact that the ends points being created, especially in the consumer world, are not really being designed with security built in. So there are often times designed to get to market very quickly. You know, they want to beat their competition with this next new greatest device. They want to keep it low cost so it can be adopted by more people. You know, there is a, there is a sensor out there about the size of my thumbnail that is about 2. It includes internet and can sense the moisture, the amount of moisture in a field. And so theyre very inexpensive. And theyre designed that way without security built in. Often times using code that is either purchased or comes from open source. And so there is some, there are problems there. As well as the hardware is bought as cheaply as possible and it may not have you will at security built in that we need. Okay. So when you start adding all of this together, it becomes very complex. So the people who are trying to keep data secure, it becomes a problem. The big question out there is, okay, if you have all this stuff, how will you orchestrate, how will you control . Most importantly, how are you going to protect your data, your intellectual property, your business, and maybe your country . Okay . So im here to tell you there is no silver bullet. And we have seen that in the news lately, with all of the highprofile, highprofile hacks and things like that. So the way that the security has been done and networked forever, is that you build a wall around your enterprise and, as things try to come in or out of that wall, you do an inspection and you look for things that you know are bad. And you have this one point in time when you can say, yes, i will let it in, or no, im going to block it. Well that doesnt work anymore. In addition, over the years there has been all these great new technologies that have been introduced to go after these threats, and so our big organizations have tons of security devices in their data center that dont talk to each other. Theyre fragmented. They just are too much to manage so at cisco what were talking about is a new paradigm were going to talk about what are you going to do before an attack, what are you going to do during an attack and what are you going to do of a an attack . In the before, you want to know everything that is in your environment. So survey the products out there. Mark talked about cdm, the continuous diagnostics and mitigation. Thats the first step. There is also controlling who can get where in the network. A poster should not be able to access point of sale data or an airconditioning technician should not get to point of sale data. Youre not just allowing access to your enterprise via user name and password. Its a user name, a password, its how theyre connecting, where theyre connecting from, what time of day it is, what their title is. So you want to segregate access to all of the things on your network. All of this is done before. During an attack, you want to block as best you can. And, there are many technologies out there. We offer them. Our competitors offer them. And, it is important to use the best intelligence you have to block. And then, if we know that things are going to get in, we have to worry about after. So after, can you find what is in your network quickly . Can you get rid of it and quickly and get back to your mission . That is what were pushing at at cisco is before, during and after. We say it no longer can be perimeter based. It has to be based on threats. Are you looking for the threat . Are you using your platform . All of the things at your disposal in order find what is going on to your network and getting ready and back to business. So visibility is critical. That is for the standard network. We havent really gone that far in protecting iot yet for all the reasons i talked about before. So if we apply this to iot, we have pretty much a standard data diagram here. When you start adding iot you need to add things like a connectivity platform that takes into account internet of things. You need to have, maybe some specific network elements. At cisco were creating rugged routers and switches. Were making small form factors. Were making all things that are, what we call flop, which is size, weight, power, for internet of things. But in addition to that, you also need sensors which is what we talked about all day here today. You need what will you do with all of this data . So you want to have these applications and business processes that take advantage of it and we talked about that today also. In order to do all of that you need big data and analytics and all of the things listed here. Most importantly from my perspective you want to spread security throughout the whole system. When people say, peter, youre out there talking about security in the network, how do you secure these iot devices . My first thought is, well, you cant, theyre not designed for it. But the other thought is, if i push my visibility and my capabilities as far to the edge, as close to those devices as possible, then im doing the best job i can. If i can push it into these devices, and get some innovation in the devices that take into account the security, then were starting to talk about having it secure. So i would like to talk about probably the most famous case study for internet of things. That is the city of barcelona in gain. Im sure you all know that spain went through quite a bit of a recession. They were hit hardest in the last 10 years and so they decided that they wanted to use technology to pull their city through. And they started by building a Wireless Foundation throughout the city where they could capture all kinds of data and put sensors on things. And as a result, many of the things you heard about this morning happened. So parking, they, they were able to increase revenue. And decrease the traffic in the city with parking. They were able to make it so that trashcans were emptied appropriately. They were able to put smart buses, smart bus stops, all kinds of things like that, save tons of money. So they saved 47 million over a 10year period just by doing smart lighting. Theyre saving 10 million a year on smart trash pickup. There is all kinds of dollars involved in it. But the most important things that they have done, they have resitized their city and revitalized their city. They say theyre bringing more than 1500 new jobs in the next three years. Most importantly people are happier. The frustration for looking for parking space has gone away. The ability not having to look for coins in your pocket has gone away. They pay over a smartphone app. People standing at bus stop are happier, and see things on the screen knowing when the bus is coming. It is attitude that has happened in barcelona is a huge thing. And the link for the case study is the at bottom of this slide. You guys will have a access to all these slides if you like them. So it is not just, if it is secure and i can put the internet of things out there i can save money. There is a lot more to it than that. So and that is that, you can increase services to your citizens. You can be more open and accessible to make it so that your citizens can do some selfhelp, better analytics and decision making. Most importantly, much happier citizens. So i would like to leave you with a thought of, youre going to hear all kinds of scary stories. It is important that we secure the internet of things. And it is important that we do it right. But, as you leave here today, think about if you could have all of the security that you need and that your data is going to be safe what new things can you do in order to bring new things to your constituents . And i think that you will find that the opportunities are endless. That is what i had to tell you guys today. [applause] stay right up there. Im going to invite back up on stage to the seats any seat. It will be like musical chairs. Well see who doesnt end up with a sight. Mark, sookoo, peter, kelly, chris, all coming up. I love a parade. This is a real opportunity for us to all talk about do we want to move this . Okay. There is james. Can i do something. There you go. My goodness, im just getting out of the way. Im going over to these guys. I was talking to them during the break about what theyre working on in terms of internet. Marcus has been at a couple of events that ive done. He is the google glass guy. He takes pictures of me with the google glass. He posts it on twitter. It is actually not bad. It is kind of amazing. Theyre not making google glass anymore, right . Were waiting . Were waiting potentially for another version. We were talking about what you guys were doing on internet of things. Talk about that. Weve been involved, some of the speakers mentioned today about inneroperability and standards. We are with a spatial consortium. Theyre a group, developing a way to exchange geospatial standards from things or away to define things within the standards. Ogc does, for example, does gml and kml, for visualization for google earth. They handle that. So describe to me what that means in terms of having okay i understand what geois, basically puts it on a map to see what it is. These are things were talking about. How does this help government do its job . Premise of the ogc is to show the usage of different organizations in operating asing just these standards. There is actually a pilot at the ogc is doing that is dealing with internet of things in a firstresponders scenario. It is sponsored by dhs and snt. It is showing how you can have different agencies or different responders, whether it is fire, police, or Incident Commander be able to have the ability on a scene from say, like on the Apple Watch App that will be able to both display data that is coming in like alerting for a hazmat situation, or take data from the user, from the firefighter in the field and feed that back in. And doing that using just open standards so. So one of the things thats really colorful about the world we live in, 2. 0, whatever we call it, particularly like the Emergency Response situations you can get all sorts of data coming in and i think Superstorm Sandy was the most tweeted event ever but making sense of what it all means. Where it is coming from, essentially having some kind of situational awareness, right . Making sense of that data and being able to make sense of data coming from Different Things and not just vertical application but converging systems and how you deal with that. Another thing brought up, bring your own device or bring your own thing, when you dont know exactly what assets that somebody entering a First Response scene will have on them. So being able to at least, make an attempt to have these devices inner operate is the key. Awesome. One of the things all of you have on your tables, there is a case study for fire service which is were all keenly away away aware of going on out west so you can find that online hi. Kelly, talk a little bit, i was fascinated about your discussion, there seemed like someplaces the Postal Service can go. You hear about this in terms of, firstresponders. It almost feels like, how do you choose amongst all the options, how do you choose where to spend your time, energy, effort, money early on . Feels like were really treading into the shallow end right now. That that is a good point. I think the example you brought up is a perfect one for us to talk a little bit about, how important it would be to know who the firstresponders were in advance. Youre only getting access to that information, to the appropriate people who need it and we would want to do that with an in person proofing event in advance. They share that information with appropriate agencies. For us, because we have, unlike our other Agency Friends we dont take the taxpayer money. Everything we do we have to make sure we have solid Business Case and we can return some revenue to the organization to sustain it. So we would first want to address whether or not it is needed to do something to reduce our costs associated with the delivery of mail or physical goods to someone. And then figure out if there is an opportunity to turn at least it into revenue stream and monetized by someone else. Which we would partner with an agency, maybe fema and do something, to help support the initiative that we talked through. Allow that to be monetized out through other companies that would integrate it into tools. We do get the opportunity to do work sometimes that is strictly for the greater good. We appreciate that opportunity when they do come to us but typically it is through the white house or other organizations requesting us to get involved. So again on this topic of how you prioritize, how do you spend, if there are a world of opportunities out there, how do you make sense of, how do you decide where to spend your time, energy and effort . The are a lot of them out there. You have to focus on the want of an impact, the eventual impact you can create to all those and thats how we prioritize and focus our efforts. Chris, you want to pipe in on disk . I completely agree. Its really up to each agency to look across the spectrum of technology and be creative to figure out where they can increase Operational Efficiency. It could be in a lot of cases cost, it could be resources, it could be reaction time, taxpayer dollars. Really we are looking to work with the different agencies to help them reach out and understand what is the art of the possible, and working to increase these by bringing new sensors, new devices to bear on the problem. My sense is a lot of agencies are saying okay theres a lot of cool things they could do, but how do i find the money, the time, the energy to do this . Again it needs to be typed into your mission, right speak with us. When you prioritize, my first thought was what they do you pull your hand out of the fire. The other thing is its not defining finding the money. Some of these projects can create revenue. You talk about the phone booths in new york with the kiosks are not generating revenue, or the parking in barcelona they generate money by better enforcement. So that automatically, i take it is automatically generated if you stay too long. By better collections. Its much easier. You can even reserve a parking space and a blocked it off for you and you can go park there. You get Better Service but you pay for it and it generates revenue. An interesting stat in d. C. Where we have park mobile app which has been awesome, but revenue from tickets has dropped precipitously, kind of throwing the city, having a problem did with that because they made make money off tickets. But they do benefit from less traffic and they get that revenue. On security, mark, was talking to Cybersecurity Company said was really, really terrible at risk analysis. Human beings to do a good job of this. Talking back when the whole ebola things going on and everyone was running around with their hair on fire about ebola. He said the most dangerous thing we do is get into a big hunk of steel and move along at 60 miles an hour and out we never do that but do we take out a device into Something Else while theyre going at 60 miles an hour. In terms of risk analysis we do every really bad job of this and trying to port it into a different world where we have all these things attached, do we do an effective job of risk analysis in that kind of space . Basically, what came out of the [inaudible] with the high value assets are. So being aware as to how or which one are high value added, setting that as a priority and looking at regards to access, that is a key element that dhs is engaged with omb on. A number of agencies identified, highvalue assets were working, providing assessments and things of that nature, two what is it that, you know, the threat is looking to being access to. And then how do we sort of wrap that a protected from the networks i. Second is information. Basically that a lot of input coming in from across federal agencies. We also have a lot of but how do you put that together . What trends are we seeing from that . Thats also going to help identify where we need to put additional efforts in the priority. The third element is working in essence from the perspective of our best leverage resources you have . Everyone is to hide regarding cyber resources. We have quite a challenge their, bringing new the resources and. So taking a look at how best to use of it, thats, we can use scoring capabilities you can put into like the dashboard apart. Instead of have a team attack a thousand things at once, lets take a look at which ones are prioritized based on their tolerance but also the threat sector. Those are just three aspects were promoting with regards to try to help agency established Risk Managements. Managementspirit it just seems like different agencies like opm, they knew what data was important and it does feel like it was protected to the degree that at least from everything, im sort not going to put you in the position of commenting on opm. I will put in a plug for my next live show in two weeks were talking about the opm had, trying to pull some Lessons Learned. Take some Lessons Learned that we to make these mistakes again. Does anyone else want to comment on the cyberthreat . Go ahead. The example of cars, hacked remotely, not with any kind of stronghold, not any kind of breaking. Thats scary could sell. If you look at it like someone can sit in the family room into something with a mobile device, drive your car. Really it comes down to fundamental concept of design. I will toggle the only tactical perspective. I hear a lot of people say we have experience of 40 years of cybersecurity. Why can we apply that to our fiscal system . My responses you are absolutely right. Applied this knowledge is to cyber part, but physical part is completely different ballgame. And most importantly the space between cyber and physical hasnt been without a. At the end of the day when i talk to cybersecurity friends and say talk about the car, they need a better firewall. Welcome if you look at from higher level, firewall itself is not easy. You should Design System so you can separate the critical stuff from connectivity. You should put some sort of hardware measure. So it comes down to not having firewalls anymore. Yet to think of more holistic perspective, combine cyber. Thats a new barrier. I got to try to cancel an account to download because they found some hacks and so its like my own phone. All of a sudden i feel safer, no one is going to attack me. Questions . No one . Thank you. I love your tie by the way. Thanks. Usaid. Theres been a lot of discussion of smart cities today and we work a lot with cities in the developing world. The question i have is what is the most important piece of the enabling device, enabling environment for lack of a better term forces i think cities that want to become smart cities to visit having good connectivity, high smartphone penetration . Was the real key piece . s quebec what i keep hearing is a lot of these poor cities have been able to almost jump step and also have a lot of infrastructure in place that we dont have even in this country in some ways. In some cases, sure. What do you see out there . I a little bit out of my it is, you will notice, when i talked about the barcelona case study, the first thing they say is we need the infrastructure to be there. So they put in wireless throughout the cities. Theres a lot more than just saying theyre going to put in wireless. You need these capabilities, put it up there. But you did mention the political will has to be there. Several speakers today talked about the need someone whos going to drive forward and you need the citizens to support it. So i would say those are the two things. Whether people cell phones right now, thats not so critical. Im going to take this question at put in u. S. Context because there are times you can drive or and you feel like youre in a third world country with some of the infrastructure thats out there, or not out there. What should they be thinking about, where should they start . I would say start with the social media. So if you look at the today, theres ways for your taking everybody, their driving experience, all feeding into a they now know what traffic is really like, what the police are, kno where the best route after leveraging it that way. Somebody else mentioned potholes, having the Postal Service are out on the roads every day, having been report potholes. You can go online up in those cities to report a pothole, things like that. Religious leveraging your citizens more. We all have come in the u. S. We all have cell phones now. Thats pretty much standard. To be able to design an app that will engage those users and get them to contribute and put in the information so that communities, local, state, national can harness that data and make it useful. Just to add, i think to a certain extent theres a bit of an advantage in not having a tremendous legacy that countries like the United States have. When you are having the opportunity to build from scratch with all of, the mobile first perspectives, then you can begin to crowdsourced information from those enabled citizens of those countries because we are seeing such huge penetration with smart devices. If you start there, he naturally inherit from all of the data that is already out there as opposed to her we are currently. It does make it a little bit easier in some ways to go down the model of building a new security right off the bat. You do that through identifying, having verified providers and enablers of content to your solutions. I think in some ways weve learned that even on the federal perspective, new agencies, Consumer Financial protection bureau, the recovery board, they got to start from scratch but they didnt have any of the old crap can we say crap on cspan . Sorry. Old stuff. We may be taken off the air in a minute. They dont have the old stuff that they have to maintain and fix and pass all those kinds of things, makes it a lot easier. Does anyone else want to comment . Go back to the idea example, i would also suggest the Political Support, in being a former [inaudible] i know the cities youre talking about. From a smartphone, i think theres a lot of that after. [inaudible] smart city note and roadmap, in the cities i think youre talking about what nations are, the Political Support because they will have to break through a lot of the super silos between agencies within those cities, within the country itself. Mark, im not sure which is the case the eu cant keep a job or ago and is recruiting you, so congratulations on that. The question and particularly at Kelley Sullivan but i guess anyone can address it, when it comes to workforce, a prior question you answered, kind of indicated the hope is that of a bunch of jobs should have people repurpose her other roles. I was hoping you could expand on that. Did i read your response right, the idea is to hold onto jobs . In general how to change that workforce as radically as to what people should be doing . Particularly a workforce like your states Postal Service. Is not an easy shift, right speak with its not an easy shift for us and some of it has been quite public. There is a lot of conversation about whats happening with our unionized workforce, and im sure thats probably what youre referencing as well. Our unions are partners with Postal Service in this conversation. They also would like to see us around for the workforce. Which means it is a reinvention. In some scenarios using the Postal Service now testing delivery of groceries. Interesting expansion of the mail service, theyre coming to the house in addition to doing those packages were the other items we can provide that would be of value to the consumers . Thats part of that extension. Their job is still to deliver and secure the United States mail but if they can provide an Additional Service that allows us to extend do something that consumers are interested in, that is what we are interested in pursuing. Does it change the nature of work essentially, how people do the work . There will probably be jobs the end of disappearing trick that happens with every sort of development of technology. Andy kay and we love change as long as we dont have to change. You, right. There will be some jobs that may not be kept at the same level as we have today. But if you look at hundreds of years, that happens anyway. 50 years ago there was really no job category called [inaudible] now we have thats a huge job category. There are no, right now there were a lot of dedicated person with a lot of typing. We do that with word processors these days. The world is going to change and iot is not the exception to that there will be new jobs created talk about drones a new technology. Think about it if you have a drug, whos going to operate in . Someone has to be able to get expert, get expert and fluid. Thats a new job category. So we dont know exactly what kind of jobs will be created, but im kind of like a little optimistic about it. A lot of experts are needed, training, education, thats critical but eventually and overtime our lives have gotten better. Even the less advantaged people in our society today, life is much better than it was even 20 years ago. Like any technology can be used for good or for evil, and hopefully you are seeing some of these sensors on trucks driving bad behavior make drivers to do the things that may not be positive. But on the other hand, it allows the driver of the truck to automatic logging so it is pulled over by police and he can show that he didnt try to meet hours with things like that. Theres always a balance and its down to the people making the decision, not the technology. Over time weve seen our lives improved though. Hi, chris. My name is learned that. Im a serial entrepreneur and based i in the arlington area ad i see a lot of investment by small amount of investment going into very much millennial to our embassy for National Covenant with with pressing problems. So i encourage those of you who are in a position to influence the Angel Investment community, early stage Investment Community particularly within. I see a little bit of the hey, lets bring important people to Silicon Valley because to shake things up and shows how to do things. Theres lots more people in the d. C. Area who work within govern and with government and contractor capacity, and they just need to get funding for our company, to be able to work and make it big and awesome just like their getting funded through Silicon Valley. Lets stop fixing millennial simple nice things and really fix some of our countrys infrastructure, and you guys can play an instrumental role in doing that. Youre talking about uber or something, right . Yes, cisco. She needs money. [laughter] but it does raise the point about money out there and how do we get, theres lots more people in the photo, kind of figured this out, and how do you come to respect what were taught but in terms of priority but also sometimes there isnt owes them an associate with these kinds of projects because they just, you havent proven themselves yet, right . I joined two years ago. Before the isaac started, and i worked as a programmer basically the you are correct. In d. C. Theyre all kinds of smart people inside and outside of the government and ill talk to Silicon Valley a lot of time, but its only because theres probably more concentration of engineers and companies that you know of over there. Funding issue is not an easy question regard us with your accountant employed or not. The only thing i see is the reason we talk about Silicon Valley is, and the reason they have a lot more Venture Capital in d. C. It is probably because its just a number, not quality, more engineers and more entrepreneurs over there. Even look at how many of them actually got funded, and thats not the percentage of auditors decade funded its not that different across the region of the United States. Yes, i absolutely agree that we should do more in funding great ideas and entrepreneurs who have the right Business Model, thats the key, the right Business Model. Technology itself doesnt cut it. You have defined a model. Investor needs to return, and provide a right path to return. I grew up in Silicon Valley. Theres a big chunk of luck there, too. Right people right time right place and it somehow magically appears. Are you writing your check . Once the main differences, it is more geared towards more millennials. Millennials in general are a lot earlier on their adoption curve. The government, it makes it harder for startups because a lot of times were looking for more mature technologies. We are waiting for all of that stuff to be flushed out. And in doing so it leads itself to being a little more conservative and thats what were not seeing a lot of start up funding your. Kelley, on this, talking about small c. Conservative, the government has been more conservative also because theres a certain risk aversion, we dont want to make mistakes. The stakes are higher. Right. You need for a safe way, its not like we used to be in a place where we will just wait and look at what else tested to make sure work and then go jumping. My sense is this that doesnt work. You have to be practicing as you go because its really evolution but if you just wait your soul for bend the curve its almost impossible to back up. You are right, he mr. And theyre on to the next opportunity. Thats what i think its important for agencies and the government as a whole, thats lazy or decisions thats why you see organizations doing rapid prototype trying to identify opportunities that we can find things that add value to not only our current consumers but the Larger Companies and country as a whole. Part of that is would love to take a bit of a risk. Be successful more quickly. Part of that is just executing through our prototypes, participating in conversation in a Community Like this and we get a lot of interesting feedback, and look whats happening with the private sector. I think the publicprivate relationships are very important for our continued success. Im going to bring up a really boring monitoring that has driven the price down because of the massive reduction cost of hardware with the center box below 5000. So we will give the government a good went with my and publish a weekend collected for a lot less than what epa pays which is a 200,000 a box as shown impacts of air quality and chemical exposure. My findings are that innovation is really easy with sensors and Opensource Software and open source hardware. Its difficult to get government to publish the data largely because of sheer embarrassment. We work with the pretty closely to get to the slow migration from the need to share. I with the agencies, information secret officers are the biggest roadblock because they have nothing to gain professionally by allowing data out of the agency, only blame if it goes wrong. Thats a good point because we see that a lot. My favorite line about open data was from the former head of the recovery board who said if you are easily embarrassed, dont get into the open data space. All of us have really bad data someplace and you just need to basically say were going to be embarrassed about something, get on with it. I do think chief information secret officers conducting chief information no officers were there people who stop you from doing things. How to get that kind of partnership so you can get things done . Ever wants to do it safely and securely, but how do you find that safe space speak with a goes back to one of the points raised on communication. Basically the dialogue between the cio and ciso are critical. So as youre putting forward one example with the exhilaration of gift cards, what does that mean for usaid as an example, when you have you will be graded as okay, if all of his cards have been addressed for the privilege area, but the impact on the nation needs to be able to define if were going to put this situation for this specific cybersecurity asset in place, what is the missing impact . We are grouping is in to what activities they now need to be able to adjust to because of this . They argue, in the end result is protecting the Critical Data that youre responsible for. The dialogue is critical to make sure that sundeck sophistry type activity that we dont have all these smart deals work around them. Partnering together. Bats in the oven has been addressed at cio at cisco. Especially if we are accelerating cybersecurity implementation. One of the challenges for cio general is to not be the chief information officer, if you are that person, these days people just go around you, right . If they get technology find a way. And that is happening. Go to a drop box for something and they could how to deal with out you. You are talk about change is good us once i do have to change. Eco divide used to do Business Information consultant the used to say that the hard stuff is easy and the soft stuff is hard, meaning that the technology, the processes, those you can do reasonably well, wheres getting people to change his the hard part. When we look at specifically this technology, the technologies are getting there and are almost better. We have the technology to me almost everything. We have technology to protect most things but most of the time is getting people to use it, is the hard part. Transformation consulting, that sounds like guaranteed employment. You are not getting out of a job anytime soon. If i. T. Is getting my way, ill go around. Weve done surveys and we said, it outside suppliers do you have a cloud . They will say 10. Our averages we are finding five to seven times more applications using their environment than the i. T. Managers know. So it is getting done. People go around it. Kelley, how do you do with this world, because you to do things in a secure space, but you want ciso and the security folks and their to help, here to get your job done, right . How do you navigate those spaces . I think solve the problem for us. We have been talking about this for way too long. We have five minutes, we can solve the problem with everybody here in this room. I think one of the easiest things we can do is first create a framework for developers. Ultimately, all of us have business goals and objectives were trying to reach. The established sort of this is the way its been in this is the way that it is doesnt always work when youre trying to drive rapid change, you know, read something thats in the market right now. If we can create an advanced, if you will, recipes, going to do with this type of information and you want to share this information publicly, this is how were going to do. Go ahead and dive right in and tackle some what are some of the biggest things before asking for. And let the kind of road map. These are the languages the developers are allowed to use, these are going to be the security practices that just have to be in place in advance. I think in doing that in advance, you have more people comply. But when you take the old standard of these are the 400 controls you have to put in place and this is what going to do, going to reevaluate you over a period of eight months, as afr finished with activities will see whether we let you deploy. Thats when you end up with business that is going to fight against the ciso and i. T. Functions and try to find an easy way which ultimately is going to break the security of the system and attack the end users. Because it will be scalable. It will create problems for them. I think we can proactively try to get what youre driving at it. We know what they issues we talked about today will be a lot easier to figure out. Its good he brings up standards. I had to. Or else they dont allow them back into building. Im going to ask a final question of all the. We need something folks walked out with. What should we think about . Before i do that, a couple of reminders about if you want your cds, its ingrained our heads, we will send an email to you. Theres a code in the back so make sure you fill out your evaluation. We will shift all the slides to you. Anything im forgetting bikes no . I got . How unusual. Chris, leave folks with about. What should they take home after spending time think about the internet of things . Technology is just continued to increase and its going to end with going to see sensors everywhere. We are learning more we will see more wearable computing devices. We will see them places that we havent in the past seemed and. What id like to take away from this is that you need to be in a place where you can take advantage of all that data. You need to start think about how youre going to fill out your infrastructure to be able to collect, harness and make use of that because its going to be there. The standard are developing the we do have the technologies. The technology is there today, its just really how are they going to build out our infrastructure to utilize all this data. When you think about, when have they gone too far . In what synergy they like you would want to share information . Thats a question i think we all need to ponder as we continue. Where do we draw the line . If i can be anonymous, maybe its not a line at all. I found out i was doing, they all know my data which is a little freaky, right . Go ahead. Mark. Peter, sorry. I am very enthused all this and i said look at the possibilities. In your job, what can the internet of things due to measure the change, to enact, to make your job easier and make it so that you are more effective with your constituents. And, of course, did not forget security it is built in, not bolted on. Just to point. One is that have everybody here exchange ideas. We need all the smart people in the world to look to share the information, to address the challenges of cybersecurity. Second is that cybersecurity is owned by all. As we talk about agencies and cio and ciso, collectively we are responsible for securing the critical date of the government. Sokwoo . I would suggest we all look around in our agencies and see how we can improve this new technology, and how to work with other agencies. Theres virtually no agency in the federal government that has no stake in iot. Transportation, energy, whatever you call it. The are some things that you can always do, and by combining forces with other agencies expertise, you could escalate and by doing that, the way to get the standard is by practicing and coming up with the best practices to show real efficiency and impact and real loud. So i would suggest everybody kind of try to work with other agencies as much as you can pick because if you keep yourself in a silos, you will never scale spent information comes when it issued. I will leave you with two points. Want is, im not counting the times are for government to do its job. Weve had furloughs and sequestration and shutdowns, oh, my. But my goodness, the opportunities out there these days are just so humongous and you can give them relatively easily and relatively quickly, as he returns on those investments pretty quickly, pretty exciting stuff. I agree with chris. Go do it. Tried to any other thing is the power of sharing information. Some instances of people saying we cant share that with another agency, we cant Work Together. My, goodness, lets change that and you guys can do it, and i know you are so go do it. Do good work. We will talk very soon. Thanks, cspan. Thank our sponsors. Go, have fun. Go do the work. [inaudible conversations] [inaudible conversations] [inaudible conversations] a reminder that if you missed any of this event you can watch it anytime in our Video Library at cspan. Org. More live coverage here on cspan2. Pulitzer prizewinning journalist Ronnie Greene will be at the politics prose bookstore in washington, d. C. To talk about his new book, shots on the bridge. Examines the reallife case of six unarmed citizens were shot by police in the aftermath of Hurricane Katrina and the events that follow. Thats live at 7 p. M. Eastern here on cspan2. All this week we are marking the 10th anniversary of Hurricane Katrina with special programming. Tonight, scenes from new orleans one year after the storm with a tour of hurricane damage and conversations those on the ground. Thats followed by 2005 house hearings featuring testimony from new orleans residents who left the city were trapped by the floodwaters. Heres a preview. Why were we held hostage . Anr i didnt go anywhere. Why were we held hostage . And not allowed to rescue ourt. People . We have proof of it. Why was that the case . Call you know what, baby . Nity that is im from the 60s. I call the police. Thats the only reason why i am a. I m didnt, to represent me. I didnt calm representing diane. I came representing the people n fie bng on the street riowght nw around a brick fireplace becausn of the only thing we have mber indecent for. If hurricane happened in augusts somebody needs to hear, why wert less than 500,000 people spread over 50 states is a question whether my neighbors wants to know. Its never before us to say should be rebuilt or not rebuild. I think its reasonable to ask that heavy flood Protection System that is going to work. But when you see this and just a few blocks up the road there is holy cross with all that they can housing, you would think, well, first things first. Maybe get people to Higher Ground because that house cannot be rebuilt. Its not possible. And you can still smell that bad smell. Even notice it later when someone tells you, you smell bad. You end up small the bad acting after. Is to find people because they cant go into until they demolish it. When they tear down the house like that, they bring the dogs first to see if this is typical house where they would find a body still. Watch our special program on the 10th anniversary of Hurricane Katrina all this week beginning at 8 p. M. Eastern on cspan. Next a panel of experts including a womens world cup athlete, a person economy and editor of a blog focusing on the politics of soccer in the former soviet to discuss economic political and social impact in russia as the nation prepares to host the 2018th train for world cup. This is 90 minutes. A really fantastic sense because. We want to talk off the project that we sort of thought up in anticipation of 2010 world cup in russia. Starting with the premise that everything is connected, that sport is not disconnected from history, from politics and sort everything else. If you dont agree, is not up for debate. You will have to live with it. Additional what the intent of todays event and the Program Going forward which will include additional pell discussion, publications and collaboration usually gives you the opportunity to view a social Club Economic issues to build a sport. Thats good for two reasons. One, weve all been invited to rush in 2018th effectively. As we were talking before we kicked off just a second copy is a rough time for u. S. Russian relations, rough time for i would say the russian people increase the isolated in many respects and this is an opportunity for something sort could happen. The debate of whether russia should host the cup has caught on expected over. Those of you are soccer fans know that just recently the world cup qualifying draw took place in st. Petersburg. If your soccer then you know you cant we do that. So the sport has overtaken the political. We can talk about sort of discussion about the cup was awarded the story behind that but nonetheless i think that train has left the station so to speak. So we look forward to diving into this and im going to have introduce the speakers briefly. Weve had opportunity to pack the program file be quick if we are very, very fortunate. A buddy you want to come to this and talk agreed to it. I appreciate you coming. I think youll be happy with it. So to my left, professor Marlene Laruelle here at George Washington, assistant director of the institute for european, russian, and eurasian studies. She is, Research Focused i was his nationalism and the what to do what were going to do here today. Next is lori lindsey who was described in an article what is researching the background as the title was totally awesome. I dont know what else you can do with have i offended. Shes also been a variety of ways. To time player of the year. Which i think its an honor she shares only with mia hamm. Is also a fan favorite. Those of you who know her know why. Or style of play the slots a very articulate and energetic advocate for gender equality in sport and she works with athlete ally which is a very Excellent Organization in that respect. But happy to have her here to her perspective as an athlete importantly. Im going to go down the end of the table to professor lisa neirotti, has been a professor at georgetown for almost the court of a century, right . That was good or bad, i think its good that shes been speed at George Washington spent on site, im at George Washington stood myself so im ashamed. But shes been to 17 olympics and four world cups, an expert in mega sports. Or Research Falls along the lines of sports tours and management specific of spectators, how they interact with event. Thats an interesting subject i think for the world cup which unlike the 11th so unlike the 11th of the health and certainly more than one city. I think we are at 12 right now. And then finally we have transcended i who is a ph. D candidate with Kings College in london. Why he is sort of interesting to me, he is doing his dissertation on football in the former soviet space and he did a fantastic job putting together a website, sort of the park offers Additional Research that he was able to step into his dissertation. I said let me go and see if we can do this because the heat is gone down there from Victoria Canada and we will Work Together for the next three years and we hope the spectators together in kaliningrad our summer over there. So with that, manuel a moderate, start off. They we will save time for questions and answers towards the end of the session. Well, thanks, mike. I want to thank the global interests George Washington university for having us today. I think that this is a really fantastic event this would just highlight some of the issues that will be with us for the next three years as russia gears up, not only for the world cup but what would prove to be a year in russia in 2018th has putin will seek to be reelected for another term. So we will have two major defense taking place in russia in 2018. Now about myself, i did my dissertation on the transition of football, classroom communism to capitalism. I looked at the period between 19872014. I wouldve liked to go further but they couldnt because you know, its a history paper, you have to stop at some point. But what it made me realize is that theres many issues going on right now but every a setting that did not fit into a ph. D dissertation. Some of these issues, those of you who are familiar with football greg linsin those issues. Since 2013 we have been having conflict in ukraine. Which was kicked off by the events. From there on we spiraled into a whole bunch of events that some commentators say that we are now in a state of the cold war, with this comparison i dont like very much. But what i think is, go a lot from what is going on in football and was actually going on in russia right now. Theres certain things that when you look at the way football is structured, the way football operates, that it reflect things going on elsewhere in society. Ill give you a few examples. Win euro made in kicked off, we saw protests in the stadium, sort of reflecting the mood in general and status. And an economic base we had the sanctions on russia which affected the ruble last christmas immensely. That wouldnt crisis had a deep impact on the way football is being played right now in the country. Because as the ruble crashed, players and coaches and specialists in russia, they all played in europe and dollars which then all of a sudden sal for increased dramatically. So we seem collapse and russia for pointing confronting this issue and sort of gives us a present on how the rest of society and the rest of the economy sort of deals with this issue. Another thing thats come up very result is the fact that the Russian Football Union has fired fabio and has replaced him with a russian coach. The way that can about shows us a lot to help russia deals with kind of problems that come with them this date, a wave reform, the way at a tough time reform its football success were blamed on a coach with highly overpaid and did not get the results. So whatever they want to say this but football gives us the truly unique opportunity to understand some of these issues. And gives a wide audience. Because when you look at, and the elephant of around the world, its a lot more than when people of all data politics. So what football is for me to futboldgrad is on it, its a prism, like a window into understanding how russia and with the entire region operates. And has futboldgrad says, to understand the region that is widely misunderstood. Thank you. So with that i get it now over two well, thank you. I dont know if i need this or not. Its a pleasure to be here, and i want to say about it, i mega event specialists not an expert on russia itself like my esteemed colleagues here, but it did have an opportunity, had five opportunities to visit russia started in 1988. So ive seen quite a bit of change over those years. And my last experience was in sochi during the winter Olympic Games. And of my 17 consecutive Olympic Games, i must say sochi ranked very high. It was extremely well organized. It was a beautiful city. The people were great. The volunteers were super, and despite what everybody may have read in the american press, i must say that i think they gains went off fine. Im not talking about the politics behind it or the money spent or anything else. Im just saying about the games that sell. I think theyre going to do a great job as well with the world cup because they know how to organize. Maybe not living up to a little crisis situation, but during the games, during the tournament it will be fine. I heard the same thing about the 1980 games, that they want of the best. I was not have those, but just wanted to put that all into perspective. Now, in terms of financials, thats another situation. Weve heard the reports, and actually some of my contacts who work for the organizing committee, did confirm that of that 50 billion figure that was thrown out for the winter Olympic Games, about half of that was probably not will be spent on the venues. But they also, the also to put that into perspective of that, say 25 billion that was officially spent, that was to build a city. That wasnt for the Olympic Games. So about 5 billion of that 25 billion, im just going to say that was the real figure, was on organizing games. The rest was to build a train system, to build hotels, the roads, everything else. Im using the winter Olympic Games just to give a perspective. Because then we go to the world cup, and the figures right now are about 12 billion. They got half a billion dollars out recently because of the financial situation. But you cant blame all of that money on the world cup. About that it has to do with the National Government that decided to build 12 stadiums versus the minimum of eight stations. Fifa has a minimum o of a state district most countries do once they get the world cup cant figure out who to leave out. They want to please the whole country. We do have in moscow and st. Petersburg. That is where the extra money goes to. Putting on tournament itself is about between 600 million and a billion dollars