Transcripts For CSPAN3 Politics And Public Policy Today 20240622

In a natural relationship. But that being said, you dont want to create the government has a responsibility to the taxpayer to be fair and to be transparent. You have to do that. The question becomes how can you do that but at the same time give industry the flexibility to do what they need to do . I dont know there is a good answer which is why acquisition reform has been a buzzword for decades and continues to be something we continue to strive for and continue to struggle with. But i would say that is probably the hard problem of the century. But nevertheless it is something we have to continue to strive to get better because there is a balance between letting industry innovate and letting industry take responsibility and put goods into the hands of the war fighter that meet the war fighters needs and making sure that the responsibility to the taxpayer is upheld. So before i go, let me follow up with a specific question. Is there one word, based on your current understanding of where congress has left this debate, leaving town now, july 31st, 2015, would you push this to a realistic level, knowing we dont have a Silver Bullet and solve it all, one thing you would like to see people do and one word of advice you would provide. The one thing i would suggest is understand the difference between business and government. And in understanding the difference between business and government and understand you cant run government like a business and you cant run business like a government. And if you understand the differences between the two, that helps to settle the relationship. Thank you. Dave, any thoughts on acquisition reform policy and where we should be doing . We take our responsibility here quite seriously as most of our peers do. I think it is about balance. In either extreme you get the kind of behaviors that none of us want, right. So in addition to finding the right balance, we need to step back and reflect a little bit on the kind of acquisition objectives that we want to have as we see the cycle times an the kind of technologies coming in, all right. Being able to ainquire things that incrementally add capability over time, this is a different kind of acquisition that you do there. So in addition to kind of getting that set point right, and we have a joint responsibility with our customers to help make that happen, it is also reflecting more on how these increment allen hansments help us with the budget pressures, help us get capabilities into the hands of war fighters more quickly, but there are challenges with those kind of acquisitions. And where does that have to happen, where is the number one road block now . Is it in existing law, in the culture of the military service and in the acquisition of the service and i im sure youll say it is all but if there is one most in need of fixing today or inovation, what would that be in your mind . I think it is a little bit of all of those areas there. I think that the technology and the future capabilities dont necessarily respect the organizational constructs that we have right now so increasingly technology is forcing us to think about acquiring things that involve varied stakeholders in ways that we havent had to bring them together in the past. It is just the way it is, right. And so part of it is just the communication across folks, both in industry and government, that form that stakeholder community, that have not regularly been working to acquire those kind of systems. Jim, you called for more revolutionary change, do you see a way to make that happen in the context of this conversation . Yeah. I think we just heard a Million Dollar comment here which is technology doesnt respect the current kind of organizational structures and the way it was adapted. So i dont know when i you could have a good argument about what era our procurement system harkens back to and some people would say it is a civil war model and it is about mass and resources. Well, we need a procurement system which isnt about mass, we need one that is about the adaptability and and knowledge effectiveness of what were procuring. And to do that, i think what we need to do is look at the procurement system not so much in terms of whether we have enough regulation to protect the taxpayer, or not, or are we acquiring the right weapon systems. We should look at it in terms of how do we widen the base of the sources and the resources being used for the developing and delivering these systems. So when i talk to some of the leading folks and in private industry about their technology and how it is being used by the department of defense, they repeatedly say to me, you know, there are a lot of folks out there, folks like the chinese, that are much better taking innovation, wherever it is, and effectively militaryizing it. And so we have an archaic procurement and Large Capital expenditure and not driven by innovation or adaptability. So if i were to council the folks going home on vacation, i might tell them not to come back, but i would also [ laughter ] but i would say the game has changed here. It is not about massing resource and allocating budget, it is about accessing the full continuum of innovation and effectively militarizing it as required. Ultimately the responsibility is not around protecting taxpayer money or executing big programs, it is about winning. And a lot of folks in private industry will say a transition to civilian technology or technology wherever it is into military use, were losing our lead on that. Just because of the sheer weight and the wrong model. The model doesnt respect the technology. So brennan over to you for any questions you have, but the question is, is the Glass Half Full or half ending because we have different themes, not debates or one person against another but themes saying were making the best stuff in the world, we have the best stuff in the world and were doing interest things across the domains you are discussing this morning and yet at the same time we have bureaucracy, and innovate or not do well in peace time and do you have a view of whether it is a Glass Half Full or half empty. And that is a good questionment and i was thinking about what words to use and i would counsel congress on being real estatisticly optimistic. Which is a way of life. You cant have everything all of the time and think everything will go well all of the time but you can be realistic about the potential. And i think that all of the organizations that we represent we really do have the taxpayer in mind. And there seems to be a struggle between those of the current leadership on the hill and their understanding of what the Industrial Base is trying to do and whether or not they have actually the war fighters best need in mind. Lmi was founded because secretary mcnamara realized that somebody outside of the military needs to see what is facing the military 50 years ago and see it in a different light and solve the complex problems and weve continued to support that mission and one of the things we continue to try to do is hook at innovation as a way to support the mission constantly. And there is a great spirit, not to get philosophical, but i will, in this country of entrepreneurialship and innovations and that will drive the opportunities that there is and i think that trusting that those that entrepreneurial innovative spirit is going to be okay and if you fail and fail forward and learn from those mistakes, it is an accurate and efficient investment in the technology, then this is all worth it. But the process and the structure, as the gentlemen to my right have recognized, it does not facilitate that process. It ties up that process. To the people that might have the solutions dont even want to participate. So i would counsel congress to be optimistically realistic about the future and to have a little bit more trust in the private sector and in bringing these technologies to bear on the Public Sector problems. One follow up. In what way is the congress not trusting the private sector enough right now. Because it pushing d. O. D. To use the traditional bureaucracy regulated methods of procurement and take advantage of the federal code and the options of commercial acquisition style of procurement . What is a specific way that Congress Gets in the way. I think the acquisition process is so cumbersome and the requirements dont meet the needs of what is being proposed. So the questions that come out and the problems trying to be solved, if there is a new way of solving them, there isnt a recognition that you have to look at it and evaluate it in a new light. You are applying old regulations and old Acquisition Policy to new solutions and there isnt there is a disconnect between how you do it. And i also think there is a fear of the unknown. If you dont have the answers at the beginning or if the evaluation process isnt educated enough for the individual evaluators that are part of the acquisition process dont understand it, instead of asking questions again and again to better educate the Acquisition Policy process, there is a fear and just a shut down of the process. So i think it is just the general bureaucracy. And jimmy said it complexity, i would characterize it more as red tape and the amount of complexity in the actual acquisition process that prevents the new solutions from being applied. Great. Well lets go to all of you. We have about half an hour left. Im going to take two questions at a time. Please wait for a microphone and identify yourself. And if you can pose a question specifically to one person, that is a help. It is not obligatory but it helps. The woman here in the fourth row and the gentleman on the seventh row, both in the aisle. Good morning. Thank you for your comments. My name is margaret cope, im an independent consultant. I have a background in Life Cycle Management in the air force. My question has to do with pma, product manufacture approval. Where is that with regard to this whole process . I know when you talk budget constraints, that was an area that we were looking significantly at and i would just like to know if you have an update, probably, jimmy, youre the one that would note most about that. And before we do, well get two on the table that way we can pick and choose. Go ahead. Im john workman with the associati association of fliets. As we talk about agile systems, complexity, evolution, revolution. What are the implications for the 21st ssht war fighter and how has the Defense Department be thinking about what the war fighter can do with the new technologies in mind. And steven well start with you and go to brennan. I can take a part and i can figure out how to do it in the field and there you go. But the problem you run into, particularly with aircraft systems, is that there are certain characteristics of those parts that you have to have. It is material properties, as well as qualities such as surface finish and dimensionality and things like that. If you dont have them, that part can fail and when it fails, it will be spectacular not in a good way. And so one of the things you worry about, when you go through the pma process, the whole idea is that youve proven that you can produce that part to have the right quality so that you have the quality part that can do what it has to do. If you descent rallize that and take away that authority your given, things like added manufacturing can challenge that because then how do you maintain that authority. The challenge for us as manufacturers is we stand by the quality of our products. And if you start flying around products that have parts that we cant stand by, then it makes it very difficult for us to stand by our products any more. So i think right now, where we are on pma, it is a bureaucratic authoritative process. Where you can successfully do it, it can drive competition and cost improvements but you have to be very, very mindful of the quality issues and i think looking ahead as we look at added manufacturing, that may become yet even more complex. Brennan . Sure. So with regard to some education, we work very closely with universities in our research and development program. We do internal r d and academically funded r d projects and one thing were looking at is how do you provide the work force that can use the technology and a key component of that are what are the skills and capabilities that they need. There is a miscon semgs that when you use a new stuff and you throw the old baby out with the bath water but physics is not changing. The technology that is going to have with stand the physics when you produce a part and put it on a plane or a Aircraft Carrier or a submarine you have to understand the engineering aspect because you have to know how to produce the part in the past and how to use the new technology to create a if you part, or whether it is the same part or print as a singular part but you have to have the background in engineering and the capability to understand how to use it. With regard to how that applies to the war fighter, it is a question that continues to be answered and that is what were working with the d. O. D. On a training and work force perspective. If you put added manufacturing in the field and at a federal operating base or a combat out post and you have an infantry that is 30 guys, who within the team has the capability to take the software to print the part and create a part as it is needed to use cad files and 3d data to print the part and what are those skill sets and i think the stem space of it continues to be a growing need and i think there is a need for having specialists and generalists who can facilitate the process so that the technology can be applied in a forward or deployed setting. Thank you. Lets take two more. These two gentlemen here. Thank you. John harper with National Defense magazine. I guess this question is probably for brennan and jim. Can you give some examples of the ways in which the services are using Additive Manufacturing now and what some of the plans are for utilizing that technology in the coming years. Sure. Im Randall Doyle from george washington, university, i would like to look at this from a different angle. Listening to the process and the quick and everything, i want to talk about external factors with the fansment of fighter planes and Missile Technology and in china and how much pressure is on to produce the products for the military and so forth and maybe because of chinese advancement in weapons, maybe that is the process of breaking down the red tape you talked about and maybe make you happier with congress. And ill add one more and potentially have a question for everybody. Well see here. That is what im hoping. Thank you. Im elliott horowitz, a former member of the Intelligence Community and the state department and the world bank. For mr. Kenyan, i have a question, what is the rate of progress of our major adversaries with the peoples republic of china and the federation in terms of rapid propulsion. Well begin with jim and work across the panel. Well i characterize the use of Additive Manufacturing among the services as islands of experimentation. And in many ways driven by either individuals or units that i have an inherent interest in innovation. Though some concrete examples of how it is being used in the field would be the deployment of Additive Manufacturing machines with socom. I mentioned the dog bone for the antennas and there has been modification of weapons so that they are rather than being mass produced, they are more custom fit to individuals. And there is some an example of something used for a sling underneath the helicopter that was made in the field. Again, i would say, that this is not in any way new. And in fact, when you Start Talking about the navy, it is in the navys dna to do this kind of stuff. The ship is out there in the middle of the ocean and it will keep going an the machine shop will come up with a solution and what this particular technology does is it widened the envelope of possible solutions that that machine shop can execute on. So the adoption path within the services is really a function of need and frankly immediate need. There is nothing like having to solve a problem that causes you to propel a Technology Forward. Now in the Industrial Base, the adoption of the technology is really kind of bifluctuating. The machines and the material, the Price Performance envelope on them is crashing and effectively within that class of machines their commodity is going on of both the material and the machine. There is also a group of machines and materials that are becoming highly specialized and regarded as a competitive advantage. So if i returned to jimmy and said would you tell me how youve locked down your processes and limited variability, well how do you guarantee youll find an element analysis, he wouldnt tell us because that is the competitive advantage. So there is a limited number of folks, usually with a lot of capital, that are truly differentiating themselves in Additive Manufacturing and frankly they are having to build the machines themselves. The machines that are available just arent up to snuff. So in the commercial, industrial sector, it really is playing out as is this a commodity type of capability with commodity or is there an opportunity for a distinct advantage and were seeing it takes a lot of money to lockdown the processes on the metal side and create parts but when do you, you have an advantage over other companies that is significant and justifies that capital investment. Brennan, do you want to add an example or two before we go to jimmy and dave. There are two things helping. The navy has been using Additive Manufacturing. The navy of dental skill has been printing bridges for people in their mouths for many years, probably almost 30 years. With the evolution of Additive Manufacturing the customization to an individual persons physiology, there is a great opportunity there. And the medical Services Continue to provide that. There is a lack of infection, when you have customized prosthetics or skull caps when you have traumatic brain injuries and that is a growing area. The other example i like to use often is the Rapid Equipping force that i mentioned, so com, special operations deployed in afghanistan. Infantry units were given flashlights and there was an exterior button and they would put it on the pocket or the pack and every time they would walk it would click on and off. And everybody with night patrols, they know that is rule number one. No light. And so they needed a cover for this. So they produced and came up with a cover for the flashlight and printed them in the field and provided them immediately to the infantry units. And that is a key example of the innovative aspect of it. And there is that it is continuing to go on, and again to jims point about the services, at the services they are pushing the envelope constantly because they are primarily there to support the war fighter and sometimes luckily they dont want to put up in the impediments i mentioned earlier about supporting that mission and so they are just pushing the technology from a Strategic Perspective and that is where were trying to help d. O. D. See as you push that across the services, having a comprehensive strategy for how you apply the technology. So jimmy, i dont know if you are comfortable talking about Global Trends in propulsion . Well that is a little hard to answer to answer directly, but here is what i will say and i will actually touch on both of those questions. There has been a lot of investment, a lot of work going on both in russia and in china and that has been fairly public. There have been a lot of articles in the press about chinas desire on the commercial side to develop propulsion capability. And so clearly that is something that bears watching. If you were to watch secretary kendalls remarks, we have a 2 billion investment in propulsion even while we are struggling in other areas and why is that. Propulsion is recognized as a differentator for the United States. It is something that sets us apart. And that is why keeping that Technology Lead is a big reason for that. That is an interesting thing, in looking at the bigger question, it is remarkable, in this nation historically weve been able to rise to the occasion when we have a national imperative. When you go back to world war ii, we had this thing going on in europe and this thing going on in japan and the result of that was a tremendous blossoming of the defense Industrial Base and in particular the aviation base. We produced airplanes, punching them off the production line day after day after day because we needed them in the fight and we found ways to do that, both the government and the Industrial Base. And fast forward a little bit and once sputnik was launched and detected, we took off and not that long later we were putting people on the moon and this turned into the cold war and the Technology Advancement that was the cold war because of a compelling national imperative. Where are we today when we consider what we see going on in russia and what we see going on in china and when we look at the Defense Strategy that we hear about, is it a compelling national imperative . Well when you look at our defense acquisition system today you might argue not yet. But are we headed in that direction . Maybe. Thank you, dave. Anything you want to add to this. Ill hit on both of those as well. From the added manufacturing perspective, i spend my organizational time in the r d spaces. But were using that very expensively. And it is really about being able to respin prototypes more quickly and far more effectively. I was in a proposal review a couple of weeks ago and were talking about how were going to modify a system with a phase two and walk with an aluminum version of the infrastructure there and experimenting with far more sophisticated materials as well beyond the aluminum instance in that particular case. When it comes to the pace of our adversaries and what were doing, Technology Wise and capability wise, im very optimistic. In the sense that some of the dialogues that are occurring right now, you dont have to be more than a few minutes into a conversation with secretary kental, on this kind of a topic before he asks you the question, are you getting the data you need. Are you in the conversations with our folks about where our adversaries are going, where our deficits are and what were doing to potentially overcome those. And same thing with mr. Stackly and the navy. They are very keen on making sure those conversations are occurring and those are substantial conversations around data and scenarios and the like, right. And they are not just operating within stovepipes either. Ive seen good conversations coming across services. So im not suggesting that those conversations werent occurring before but they are occurring now with a sense of intensity that i can actually see the difference. I think well do one more round of questions and allow everyone to make final comments too. While i look for hands, im going to say that we have general campbell coming from afghanistan to be here tuesday at 3 00 to talk about the state of play there. But that also is an opportunity and im sure everybody in the room would want to join me, we may or may not have another opportunity on stash tash to say thank you to a departing group of military leaders that as you know are leaving now in mass. So were seeing the chairman and the vice chairman of the joint chief and the number, all four is changing in weeks an the navy is in transition and we want to thank general dempsey, ode der know and all of those who served with them during this intense period of military service for our country. And when we thank the panelists, lets keep the round after plause for the wonderful military leaders because it is a historic moment as the United States makes this transition out of war and seeing those four leave brings it home for me. Sorry for that aside. And lets get three last questions and then a final wrapup. So the question at the very back and then you two here. And then well go across the panel. Matt jones from the boeing company and i want to thank the panelists for very informative session here. Thank you very much. My question is related to i guess ill aim it at jim. Youve talked about the application of Additive Manufacturing to logistics and to other aspects of it. Do you see much evidence of how Additive Manufacturing is changing design philosophy. In other words are people starting to design for Additive Manufacturing . And the gentleman here in the fourth row. Im ryan sturgil with the cohen group. I want to ask what initiatives you see other d. O. D. Funding or potentially even other departments for Additive Manufacturing and for example the white house has moved to set up this National Network for manufacturing innovation and the first center is on Additive Manufacturing, i think based in youngstown, ohio and i think d. O. D. Kicked in a fair amount of money to fund that initially and amaybe you can comment on how that is going and are there other initiatives down the pipeline that we could see coming . Thank you. And over here. Sean lingis with federal computer week magazine. Dave, you mentioned that adversaries are kind of moving away from a hardware laden approach to more software to having digital things early in the cycle, that is maybe a crude summary of what you said and can you elaborate on that and what you mean by that and the implications for how the u. S. Does business. And because they were put so succinctly, ill bring in forge hand into the mix and well follow up. My name is flant and my remarks are my own. I would like to get remarks from 3d printing and energyic materials. We heard about Component Parts but if i can look toward cartridges for individual soldiers put forward and air drop munitions to be tailored more adaptable and more efficiently placed in the hands of the war fighter to zero in, opportunity and efforts, what is going on now that you know of, the merits of this kind of research and effort and lastly Defense Industry and academic partnerships, things we can leverage our graduate students on, what are the opportunity trz. Why dont we work from brennon on downward and conclude the questions as we go. Okay. I i can speak with the three of them. With regard to the logistics, the key part that we see in terms of applied Additive Manufacturing is you are turning the supply chain on its head. And you create the part at a Manufacturing Base and then send it to a depo and it gets put on a opponent or sent out into the field. If you push the entire supply chain forward and you actually put the machine in the field and you are printing in the field, you are actually just truncating the entire process and meeting the need exactly where it is. So the potential there is great and significant and in condensing the whole supply chain and all of the logistics that support it. And looking at reduction of inventory, reduction of the money spent on the space where the parts are housed. But again it has to be a thoughtful process. Which of the parts is a Business Case to truncate that logistics and supply chain. And then with regards to the question about academic partnerships, so a lot of the universities work with organizations like myself and then the youngstown, ohio, organization, it is america makes, that you were referring to, it was an innishive born out of the d. O. D. And it brings together industry academia and the services and the department of defense to have a conversation and continue to push the Technology Forward and to facilitate the process the acquisition process and introduce the entrepreneurial spirit in the small organizations that focus just on the technology of the 3d printing and the potential implications. They may not have a familiarity with the d. O. D. Contracting process like most of us do. And so america makes and organizations like it are making those. And there are directive working with schools, fliets are the schools, and the dreams lab at Virginia Tech is the 3d arm and there are investments that different organizations within d. O. Did are making to work with them collaboratively to look at what the potential implications are and what the processes are and where you can find efficiencies and what parts or components would be printed and we do work and facilitate that conversation. So taking the questions and investing our own funding and in answering those questions and using the academic expertise. The graduate students in those programs again still have the traditional manufacturing and engineering background and then are advancing it to understand better how do you design in 3d, how do you look at a part that was subtractively manufactured or three or four parts and put them together and look at how they could be printed. And so those are some of the things and i hopefully covered all three of those. Jim. I would like to address the question around design of Additive Manufacturing. It is an art and not an engineering science, that the software the Design Software needs to take a jump forward before it catches up with the technology, that there is a lot of lack of understanding or just frankly knowledge about how you design the digitally optimal part, as it is sometimes referred to. So in many ways i compare it to, when composites came in to aerospace and everybody was a metal person, there was just an incredible adoption cycle, a cycle to totally reorient themselves, a cycle of getting composite education into engineering schools before it really flourished. That took decades, really. So there is some of that going on with design for added manufacturing. I would say there are two interesting things i think in the manufacturing space. The first is where designs are coming from. Though weve all heard about competitions being run on jet engine brackets or parts coming from design and art schools, used in industrial applications. So there is this democracy of design already occurring and where do you go for ideas and solutions to include the actual users of the product. The second thing is my experiences that folks that embark on the design for Additive Manufacturing path often veer off and start designing for their own supply chains. Because as they lay out the economics and the needs, they revert back to i dont want to change the part, i just want to be able to build it at the point of use because of what that does to me logistical requirements and my inventory requirements and what it does for a disappearing source of parts, et cetera. Thank you. Dave. So sort of what is the implications for more and more software content, closer and closer to the front end of the systems. Maybe ill motivate that with an example. Ill take you back a couple of decades or more. So there is a set of enthusiasts that have scanners and they listen to things going on in the radios and if you had one of those 20 or more years ago you would figure out what you want to listen to, you go down to your local Electronics Store and buy a crystal and you would open the back of the radio up and plug the crystal in there and you had four slots for crystal so you could pick four in you wanted for and if you change your mind you go back to the store and get another crystal and then listen to the radio frequencies of most interest to you. And is we take for granted, you get it, the frequency you are interested in, boom, you are listening to it. As new formats come out, in large part that new system is able to address and receive and understand those, right. An the reason it can do that is because we are converting from the radio frequency that comes over the air into a format where we do the processing in software much, much earlier. So the change to accommodata any system in this case, a new radio that you want to be able to listen to, is an upload of software into that system, it didnt going down to the local store and buying a crystal. Sow can extrapolate from there to systems where were not listening but maybe were communicating, right. And systems where perhaps we want a bridge across radio farmots. In the past you might have to have different sub radios for what you want to bring and now in software you can make that connection occur. And so the real implication is one of efficiency, cost, expense ability and all of those things. And jimmy. And i appreciate that relationship here because my fon is a Hughes Bryce Harper fan. And we cant make him in a 3d fashion if we could. A little one. Yeah, maybe. There are a lot of key ideas here. I think going back to the question on design for Additive Manufacturing, at the end of the day, that is the real opportunity. That is the real opportunity. Because it opens up a whole new way of making things that can cost less because i need less material, that can take less time because i can eliminate some processes out of my manufacturing line, there are a lot of things i can do with that that frankly just make the product better. They take weight out of processes out of other things where i cant remove it later on. I have design flexibility. Right now i have a program where i have a military engine on test and we made parts of it using Additive Manufacturing and i could lay in instrument leads and or ports for instrumental leads and by doing that, i dont have to add things that disrupt the aerodynamic performance and it just makes it a lot better and that is really ultimately where we need to go, what is the catch. We have to learn how to do it. As jim alluded to it, it is kind of an art right now, we get used of thinking of physics. Physics, f equals ma and you cant push on a rope. And how we do our analysis, we are to rethink not only how we make things but how we design things and analyze them with the physics to take full advantage of that. The opportunity there are things like the america makes initiative, like stem initiatives that had added manufacturing. And america makes was intended to cat liez the cattalize the industry and it was worked because were here talking about it and Companies Like my own and others are heavily engaged in it and working in taking it forward very quickly. The other part of that with stem, universities are a huge part of that. How do i think dishly about the physics. We have a relationship, we heard about two universities earlier. We have a relationship naturally being a Connecticut Based Company with the university of connecticut with we are working on Additive Manufacturing and if you talk to Similar Companies youll talk to similar stories about relationships they are forming with universities specifically for that reason and i think there is a huge opportunity there and i think it is only a matter of time before we get there. Wonderful. Thank you all for being here and please join me in a big round of thanks and appreciation. [ applause ] with congress on its summer recess this month, wii featuring our stash tash city oez tour which featured sites across the nation to hear from local historians and auck ors and civic leader. Today we went to ft. Lauderdale. Watch that at 6 00 p. M. Eastern. And tonight a televised debate, the first and so far only televised debate scheduled with all four leaders. The participants are Prime Minister stephen harper, new Democratic Party thomas mull care, liberal party leader just intrudo and Green Party Leader elizabeth may. This week Prime Minister harper called for the election to be held on october 19th, kicking off the longer campaigns in modern canadian history. The debate hosted by mcclains magazine will be on cspan and cspan radio at 8 00 p. M. Sunday night on q a, former emergency manager of detroit kevin orr talked about detroits Financial Issues and his job overseeing the largest municipal bankruptcy in u. S. History. If detroit had taken that 1. 5 billion that it borrowed in 2005 and 2006 when the stock market went down to 6,700 and invested it in an in dex fund, dow jones, standard and poors, whatever, stock market is now trading at 18,000, three times what it was. They would have not only tripled their money, they could have paid the pensions in full and got back in the business of paying the 13th check, giving pensioners a 13th check in at the end of the year in addition to the 12 they are due. So it could have fix the management, just like any organization like the United States as well, if you have strong and focused leadership you can resolve these problems but it takes a lot of effort. Sunday night on cspan q a. Next remarks from nigeria president muhammadu blv. He was in washington, d. C. Last month and delivered a key note speech on his relationship with the United States at a an event hosted by the u. S. Chamber of commerce. His remarks are 15 minutes. [ applause ] please sit down, ladies and gentlemen. I think mr. Paul hinks started it by rereading his speech. I think im constrained to follow suit. When we read our speeches in the other room, the audience was so small and, in fact, i was wondering why some of the governors have turned down our invitation only for me to find them here. Now so we are complete, i too will reread my speech. [ applause ] the executive governors here present of nasawra, and the former governor of river state, the governor of borno state, the center of the battleground of boko haram, the governor of emu state, the governor of edu state, and the rate of my team, mr. Paul littles, the counselor of africa, mr. Haines, president Corporate Counsel on africa, and mr. Pliets our ambassador to the United States of america and to the capitals of industry that are present, the distinguish leaders and gentlemen, im not surprised to meet [ inaudible ] here. Because a friend of my big friend bola habitu, im required to the chief executive of adebowale adefuye, but i was surprised to see the chief leader of the israeli bank and maybe the govern of the central bank. I wish you well. [ laughter ] ladies and gentlemen, let me begin by saying how pleased i am to be here tonight and to be treated to this elaborate dinner by the United States chamber of the commerce and the Corporate Council on africa. There are so many entrepreneurs and capitals of industry tonight speaks well of the growing relation shim between nigeria and the United States. I would like to commend the chamber and cca for assembling United States Companies Whose top executives have taken me through their vision and activities in nigeria. My intention here tonight is to simply to bring our message of hope about my countrys future and the opportunities that are available for United States investors. Ladies and gentlemen, due to the longstanding excellent relations between nigeria and the United States, our two countries found it necessary to sign a violation Commission Agreement in 2010. As the framework to guide our interactions. The agreement provides a template to effectively and efficiently manage the growing political diplomatic, social, economic and Security Cooperation between nigeria and the United States. A line with bnc and the need to strengthen our bilateral relations and investment have been organized on power, agriculture, and infrastructure. These interactions have led to increased economic and investment activities between nigeria and the United States. I would like to see these interactions broadened and sustained because a huge econom and trade relations beyond the current levels. It is my intention to create the next environment for future investment in nigeria. We are a most superfluous nation in africa. Theres vast human resources, and were blessed with an abundant skilled work force. We are the prime candidates to become the destination of choice for the United States investment in africa. [ applause ] the investors know from experience that the nigerian market for investment is better than any other in africa. I will work hard to improve our country. The challenges i lay on the table tonight is for the United States and nigeria to take advantage of the political cooperations between our two countries, to concentrate investment activities, including joint Venture Projects in the private sectors of the nigerian economy, including power generation, gas, agriculture, mining, health sector, and other sectors of our economy, to take advantage of the United States african growth opportunity. Ladies and gentlemen, while i recognize the role of governments in facilitating and promoting the economic growth, the private sector must resume the increasing role of growth. This is even more so for us in nigeria, as we take steps in a diverse way to grow the economy. In particular, we will welcome general investors who are willing to come to nigeria for minerals exploitation. Generation employment was one of my key campaign promises. Ill do my best to keep this promise. I will do my best to keep this promise. [ applause ] there are other ways to expand the Economic Opportunities and create opportunities for millions of people, for boost in domestic manufacturing, and Infrastructure Development and industrialization. Let me repeat, nigeria will partner with general investors who are willing to join us to achieve our economic objectives, and at the same time to reap returns for that investment. There is more in nigeria than oil. This is why i want to stress the need for increased United States investment in our nonoil sectors. The administration will be attentive to the needs of the business community. And the policies that will strengthen the sectors that will drive the growth. [ applause ] we intend to reduce waste with accountability and good governance, a respect for the rule of law in compliance with observance of constructual agreements, and removal of some of the measures that the federal government will promote. Ladies and gentlemen, nigeria will require heavy fund iing whh is not just in nigeria alone. In this regard, i would encourage the United States Foreign Investment and agencies such as overseas investment cooperation, and the United States export import bank. To include access to capital, and funding of such businesses. Nigeria, therefore, requires investment of the United States Energy Companies to improve our power supply. While were confronting the Energy Sector in nigeria, i want to assure you that the government of nigeria is prepared to take on the challenges related to gas shortage and vandalization, both of which are known to have in recent times had disrupted transmission of power to the consumers. Ladies and gentlemen, the current environment can only thrive under a secure and stable environment. As such, im giving full attention to the fight against boko haram insurgents in collaboration with nigerias immediate labors. To this end, nigeria has pledged 100 million United States dollars to the Multinational Joint task force for the resources for the task force to effectively function. Last month nigeria released the sum of 21 million United States dollars of this pledge, and stands ready to support the pledge until the tax force becomes fully operational. Niger niger any j every little bit helps in this allimportant fight against terrorism. It will ensure the protection aof every inch of nigerias territory. And providing the utmost resumption of normal life. In conclusion, i would like to remind you all that we are continuing with privatization programs in sectors ranging from telecommunications, energy, gas, minerals, aviation, health and Infrastructure Development which will improve architecture. We will also simplify these procedures, based on principles of democracy. I, therefore, seize the opportunity to formally invite American Business community to take advantage of our liberal trade and Investment Climate to do business in nigeria. I thank you very much for your attention. [ applause ] this weekend, on the cspan networks, politics, books and American History, saturday night at 8 00 eastern on cspan, congressional profiles with four freshmen members. Pennsylvania democrat brendan boil, Louisiana Republican ralph abraham, and new Jersey Republican tom macarthur. And sunday night at 9 00 with elections coming in october, well show you a debate among the four National Party leaders in canada. On cspan2, saturday night at 10 00 eastern, on book tvs afterwards, Charles Murray argues through the use of technology, we can rein in the power of the federal government. And sunday evening at 7 00, susan southern talks about nagasaki japan. This weekend, on American History tv on cspan3, we commemorate the 70th anniversary of the bombings of hiroshima and nagasaki, japan, and the end of the war in the pacific. Our programming starts saturday morning at 10 00, with a conversation with Harry Trumans grandson. And well visit the exhibit with the universitys director of nuclear studies, peter koznick. And sunday morning at 10 00, our coverage continues, with the 2000 documentary of the making of the atomic bomb. And interviews with two bomb survivors. Get our complete schedule at cspan. Org. Next, two panels discuss the global increase in economic Cyber Attacks and espionage, and examine threats targeted against the United States. Participants talk about the current strategies employed by the u. S. And its allies to defend and counter those attacks. And make suggestions on how best to improve cyber defenses. The Hudson Institute hosted this forum. All right. Good afternoon. Im samantha ravich, the Principal Investigator on this project. I want to thank everyone for attending. In particular, i really want to thank the Hudson Institute and the foundation for the defense of democracies for cohosting this event. I also want to thank the coauthors of the monograph. Some will be speaking today. Zarate, dubowitz. But some may be in the audience, abe and tiffany. I dont know if tiffany is here. Tiffany was quoted extensively in a recent Washington Post series on the cyber vulnerabilities of the auto sector. A few housekeeping notes before we get started. The first panel will begin momentarily. And about one will roll into the second panel. Finish around 2 00. There is a short survey, if you could, if you havent taken it already, we would really appreciate it. It will give us its anonymous and short. It will really give us a better idea about how people are thinking about cyberenabled Economic Warfare, and where resources should be put to it. We will be publishing both a synopsis of this seminar, and the results of the survey, so stay tuned. All right. So let me set the stage for a few minutes on how the project on cyber enabled Economic Warfare really got started. It really had its genesis back in the mid1990s. In discussions with incredibly smart people like marge at the Smith Richardson foundation that sponsored this work. About the intersection of economics and security. So in 1997, the Asian Financial crisis hit, if you remember. It began this thailand and then the contagion quickly spread to indonesia, south korea, malaysia, other countries throughout the region. Foreign debt to gdp ratios rose over 180 , during the worst of the crisis, riots occurred, governments fell. The causes of the crisis were varied of the but most experts think it was the combination of crony capitalism, and economic bubble flooding the market with cheap money, and a simultaneous slump in semiconductor prices with the rise in the value of the u. S. Dollar. But from westport, connecticut, we discussed how economic destabilization in Southeast Asia could potentially affect large eregional securities. What would it mean to relations in taiwan and china. What would it do to separatist groups like abu sayyaf. It was the malaysian Prime Minister at the time, what he was saying that really got us thinking. He appeared directly and piping the blame on the finance ears who said they sabotaged the malaysian economy. He said the economic fires were no accident, but a western conspiracy to rule the world and tell other countries how to run their affairs. We discounted the malaysians specific diatribe and ret oh trick and antisemitism. If you remember that part. But we did think about the broader issue of how a country or countries could use economic means to undermine an adversary or change its policies. We thought back on americas use of Economic Warfare against the nazis, then again against the soviet union. And we began to think, if and how the u. S. Would need to think differently about these threats and capabilities as the world Financial Markets became more automated, and more integrated. Over the next decade, the conversation kind of waxed and waned, but came roaring back as evidence began piling up on the scale and scope of Cyber Attacks against u. S. Banks, u. S. Defense contractors, u. S. Intellectual property, our electric grid, our health care system, the most sensitive parts of our government. Were we seeing something new . Again, theres always been Economic Warfare. Where one side in a conflict goes after the economy of another to affect and weaken its overall strength. But the rise of the global electronically networked economy, and the growing crossborder integration and interdependence of its constituent parts has produced sizeable opportunities for various actors to develop new methods, and strategies of Economic Warfare. Both state and nonstate actors increasingly can contemplate new possibilities for using pernicious cyber penetration of critical economic assets, and systems, in order to cause harm to a target state security capabilities. So we have this new class of security threats. Cyber enabled Economic Warfare. The attempt at achieving political and security goals through cyber enabled economic aggression. And in this type of warfare, the United States is particularly vulnerable. As Mike Mcconnell said, if we were in a cyber war today, the United States would lose. This is not because we do not have talented people. Or cuttingedge technology. It is because we are simply the most dependent and the most vulnerable. So we started this project with a few organizing questions. One, within the escalating Cyber Attacks on u. S. Public and private organizations, is there lurking a new type of action. Some form of concerted strategy to undermine the u. S. Economically. Two, are there adversaries whose strategies are specifically designed to cause economic harm that could weaken or significantly debilitate u. S. Security capabilities . Three, is the u. S. Prepared to identify and address such strategies effectively . And four, if not, what can be done . We did not attempt to provide definitive answers in the monograph and through this seminar, rather, what we wanted to do is start a robust, muchneeded debate on this topic. The chapter authors and those who are participating in some of the seminars weve held have also been willing to put novel and creative approaches on the table. Some are workable, some might not yet be workable, but it is critical for new ways of thinking to be explored to address this problem. Because to a person, we are certain that u. S. Intelligence, defense, treasury and Homeland Security departments and agencies appear to be inadequately constructed or attuned at present to address the way these threats are evolving. The u. S. System for detecting, evaluating and addressing the cyber enabled threats is insufficiently focused on the matter. This raises concerns about americas preparedness for identifying and responding to existing economic threats. And the inability to match the rate of the evolution. And with that, i want to turn to our first panel that examines the evolving nature of this debate. Were honored to have three highly knowledgeable and wellregarded individuals. So our format is, that each will speak for about ten minutes. And then we will open it up to q a for another 20 or 30. So first up is the honorable juan zarate. He served as deputy nshl security adviser for combating terrorism. His phenomenal book explores the evolution and importance of this new era of Economic Warfare. Juan serves as chairman and senior counsel for the this is a wonderful turnout. I want to thank the Hudson Institute, and Mark Dubowitz for hosting today. Sam, thank you for your leadership, for shepherding the authors for this important piece of work. I would commend all of you in the room, and those watching online, to make sure to pick it up and read it. Because the contribution at least from the other authors in this compendium are incredibly important. Im honored to be here today, especially with steve and mike, to discuss these issues. I want to thank sam, too, because she gave me an opportunity to write a bit more about the issues that i began to explore at the tail end of my book that i think are critical as we look forward. What i want to do is discuss with you, and maybe open up the discussion for the panel to talk about the convergence of financial and cyber warfare. Because as sam has laid out, one of the interesting dynamics of the 21st century, how dynamic, how fluid, how interconnected both the Global Financial and cyber domains have become, and how interdependent they are. The reality is, the more dependent that the u. S. And western economies become on those globalized interconnected cyber systems, the more vulnerable we also become to the potential asymmetric impact, and effects of those who may try to attack, if not affect u. S. Interests. And so what i would like to do is talk ha little bit about what that convergence looks like, starting first with the discussion of the nature of the threats. And then what this means strategically. Because i think where we are now is were facing a very dynamic and shifting Threat Landscape. But also a dynamic and shifting strategic landscape, where the threat of asymmetric capabilities is really upon the u. S. And has really been identified by the dni, and others in the u. S. Intelligence community. So let me start first with the Threat Landscape itself. In particular, the actors involved in this space. Its clear that actors around the world, be they state or nonstate actors have realized theres asymmetric advantage in using cyber tools, using tools of financial or Economic Warfare to their advantage. That in many ways, it provides a low barrier to entry and asymmetric advantage to think about the use of these tools in a much more aggressive way, to attack u. S. Interests. In many ways, its laid out the 20th century, in the beginning of the 21st century, dominated not just by the American Economic dominance, but really a dynamic where the u. S. Found creative and innovative ways to use power and influence, and reach to get the rogue activities from the Financial System. Were seeing this play out obviously in the negotiations with iran. Were seeing this play out to a certain extent in the debate around russia. The ability to use financial and global tools to isolate rogue behavior has large by been the province of the u. S. Government and u. S. Policy. But u. S. Competitors, and threatening actors realize that those very same tools, those very same mechanisms, some of the same strategies can actually be used against the u. S. For asymmetric advantage. So you see a full spectrum of actors playing out in this space. Realizing this dynamic. Super empowered individuals, hackers, for political or other reasons, profit often using these tools to go after the Financial System, in particular banks. Sophisticated organized crime groups using deep expertise found easily on the internet, beginning to infiltrate banks and the Financial System. Intelligence services, figuring out how to use these tools for state and nonstate advantage. Again, for profit and for political purposes. And then finally, nation states. Some of them major powers like russia and china, others marginalized like iran, syria, north korea, figuring out ways to use these very same tools to influence. And weve seen plenty of examples of that. One of the advantages to these actors is the low barrier entries. As we often say, its not very costly to get into this game, or to be on the offense. Its incredibly costly to be defending against these. But theres a supply of expertise available on the internet. Often sold to the highest bidder. There is the dark web that provides access to those willing to play in those dark alleys of the internet, and to connect with those with expertise. Theres open source protocols and programs that allow individuals and small groups to have global reach. And theres weak defenses globally, whether its at opm, or in other systems around the world where small or relatively weak actors can gain access to prized information. And so you have a spectrum of actors with a spectrum of capabilities that provides a low barrier to entry. And begins to challenge the u. S. System and dependencies. Now, the tools of disruption, and potentially even destruction are many fold. You have spear phishing techniques and attacks, which are common in the cybersecurity space. Youve seen ddos attacks, increase in sophistication and frequency. Youve seen malware evolve into some pretty dramatic and important ways, in particular, attacking the financial sector. Youve seen trojan horse attacks, which may portend potential destructive malware attacks. These arent imagining or hypotheticals, weve begun to see them. The jpmorgan attack last summer. A good example of the potential for vulnerability as well as destruction. The dark seoul attack led by the North Koreans affecting south korean banks and operations. The denial of service attacks led by the iranians and syrians against Western Banks which continue to this day. The attacks against the middle eastern banks in 2012. The nasdaq hack, which has not been fully determined, or figured out, in october of 2010. Matched with significant infrastructure attacks, like ramco and others. Portend the real series of adaptations and attacks on the Financial System in a way that is strategic, systemic, and important. Now, let me move just very quickly to discuss why the Financial System, in particular banks have become such an interesting and important part of this landscape. As ive often said, in many ways, the International Global banks are now the center of the cyber storm. And thats for a few reasons. One, banks in the Financial System, where the money is, right . So if you want to profit, if youre an organized criminal ring that just wants to make money, you want to engage in fraud, thats where you hack. Thats where you attempt to get access to data and to money. Its also where intellectual property, Sensitive Information may exist, informational data important to data, also intellectual property important to deals and companies that are engaged in mergers and acquisitions, and attempts to enter new markets. So that information becomes valuable to a whole host of actors. Banks over the last 15 years have also become protagonists, and many of the National Security issues and debates that affect rogue actors and countries. So the very isolation of iran, for example, from the Global Financial system has been driven in part by what the Western Banks have decided to do, or not do, in terms of business with the revolutionary guard, or Iranian Companies and fronts. And also, actors in the space, the full spectrum that i described understand that banks and the Financial System are part of the key vulnerability and a Systemic Risk for the west, and for the United States. And so some actors, no doubt the most destructive among that spectrum, would find it incredibly advantageous, if not helpful to try to bring down the system in some way, or to destroy the trust that is at the core of the international Financial System. What hank paulson once called the magnificent glass house. And so the banks, the Financial System find themselves in the middle of the cyber storm at a time when the asymmetric environment is evolving. Evolving in some interesting ways. As sam mentioned, and as the report lays out, the u. S. s vulnerability is increasing over time. With hybrid warfare, and gray zones of warfare beginning to evolve as parts of national doctrines. We see this clearly with the russians, thousahow theyre thi about the use of proxies in cyber capabilities. You see this as well in the environment where theres much more fluidity than in the past with rogue actors able to interact, and profit with and for each other. So the Chinese Government able to use nonstate actors to hack, and to claim deniability of those attacks. The syrians and iranians developing their own capabilities, perhaps relying on others. The North Koreans clearly developing capabilities as seen in the sony hack and attack of last year. So there are enormous adaptations happening due to the technologies, the Global Connectivity of the system, but also strategically with these rogue actors, with these challenging states, thinking aggressively about how to use these tools. And i know the next panel is going to get into some of the defensive dimensions of this, sam, but i do think its worth mentioning, at least some of the ideas that i put forth in my piece, and that i know we will discuss here, because there has to be a new way of thinking about the strategy. There has to be a new way of thinking about these tools, in ways that not only puts us on the defensive, but also on the offensive. And thinking about more aggressive Public Private partnerships and paradigms that allow us to create not only defense indepth, but also denial, strategies of deterrence, which we have yet to do using financial tools like the president s executive order from april 1st. Perhaps some tailored hack back capabilities, in particular instances, perhaps with cyber warrants. When the government gives license to the private sector to protect its systems, go and destroy data thats been stolen, or maybe even something more aggressive. And then finally, developing the redundancy of our systems, so it becomes less attractive as a strategic tool for our adversaries. So with that, i hope thats a helpful way of framing the issues. Its a much more dynamic environment not just in terms of the threats, and the technology, but also strategically as we look at the landscape. Thats fantastic. I look forward both in the q a from this panel and rolling into the next one, to discuss some of those things that juan laid out at the end, particularly the hack back, which is a very interesting topic. Next up we have steve chabinsky, whos general counsel and chief risk officer for the Cybersecurity Technology firm crouch strike. Mr. Chabinsky served for over 15 years with the fbi, where he helped shape many of americas most significant cyber and Infrastructure Protection laws and strategies. As deputy of the fbi cyber division, mr. Chabinsky helped oversee fbi strategies, intelligence analysis, budget and policy development and execution, and major outreach efforts and focused on protecting the United States from Cyber Attacks. So mr. Chabinsky . Steve . Thank you. Juan, those remarks were so good. All youve left me to do is actually pull some of the subjects you brought up. Where you really started, you know, where you ended is where im going to start, which has to do with strategy. Where are we, where should we be. We actually have a failed strategy right now. The way we know this is we keep putting more resources, more people, more effort, more policies in place, and the problem keeps getting worse, right . By no stretch of the imagination can someone say thats going well. Even our best efforts, to the extent we say were doing well over time, it doesnt compare to where the threats going. So we keep that differential keeps getting further. I want to address why i think were there. But first, i really wanted to summarize in my view what those are doing to us from an Economic Warfare perspective. What were actually doing to ourselves in response thats making it worse, and what this portends for our future and hopefully what we can learn from that. What others are doing to us, as juan has mentioned, goes across a full spectrum of activities that range from stealing confidential information. Some highly Sensitive Information. Intellectual property which gives our businesses, not only a fair market condition, but over time, weve seen us to become economically powerful enough to sustain our military capabilities. And private information about individuals that were seeing can be used both to defeat consumer and citizen confidence, as well as used against some people depending how sensitive the information could be used for espionage purposes and blackmail and extortion. The ability to capture information also shows the ability to change information, and to destroy information. And juan brought up a couple of those examples. The aramco case, in which a company in the middle east wakes up to find 30,000 computers essentially destroyed overnight. But its not only about data. Its also about physical systems that are being run. So if you change the integrity of nuclear enrichment, for example, which weve seen capabilities that can be used, which could also be used against us, or manufacturing products, changing integrity to chips, components that go into military fighters which weve seen through supply chain attacks. What that shows you is there are a number of ways for the adversaries to both react, come at us, and how they get into systems. It can be remotely. You hear about the phishing attacks. It could be through the supply chain as we mentioned. Products are being created all over. It could either be in the design, the manufacturing, the delivery stage. And it could be insiders that are sent to our country, which is fairly liberal, in terms of work visas and the diversity of our work force. So the vulnerabilities are enormous. And now, let me step back to how weve responded to that. Because economically, weve responded in the worst possible way. What weve done is weve sunk billions of dollars of our budget into the least probable method of success for cyber strategy. Now, what weve done is weve focused almost entirely on vulnerability mitigation. We are expanding our surface area of the internet. Theres one brand that just the other day, the u. S. Government told all hospitals to stop using a particular type of Infusion Pump because theyre worried through the hospitals enterprise network, hackers could get in and start changing the delivery of medicine to patients. We saw, of course, a car being demonstrated the demonstration of a car being taken wildly offcourse. Vulnerability mitigation is a fools errant, if you think that that will work against determined persistent, so fis ti skated, allspectrum actors that were up against. It doesnt work in the physical world. What we do in the physical world, you do a certain amount of vulnerability, you lock doors, lock windows, but theres a point if an adversary wants to get in badly enough, whether its rappelling through the roof, cutting through the ground, they will. And we change our strategy quite quickly to Threat Deterrence. Which juan also mentioned. The idea that we concede the ground, we say, it is possible for you to get in, but no longer will this be about me protecting myself. It will be about me going after you. And the principles of Threat Deterrence involve detection. You dont know theyre there, its pretty hard to deter them. Were seeing routinely organizations, agencies, Corporate Industries that are very mature, taking in excessive of 200 days to know theres even an attacker on their system. So you have to be able to check them. Either based down through the person, or whos behind it, or responsibility model is perfectly acceptable. We dont know if its you, but youre responsible for stopping it because its coming from your area. And then penalties. Some penalty based deterrence. Currently, for what were seeing in the advanced space, is they get caught, and they get to try again. They dont succeed at first, but they try, try again. That model has to change. In the physical world, we put up alarms. And so that immediately says its for detection, right . You put up cameras for attribution. When your alarm rings at 2 00 in the morning and it goes to the Monitoring Company, the Monitoring Company call the police, they dont call the locksmith to come over. Its about penalty based deterrence. And youll note from an economic perspective, that what weve done to ourselves in response, we are bleeding ourselves dry financially with our response because it has led to two concepts. One is diminishing designs on our cybersecurity investment, meaning every dollar were spending now is no longer worth the same amount as when you started off. At the beginning of a program, just like in the beginning of physical security, the dollar might be worth 100 of protection, or maybe even more, and it inches slowly towards having 1 represent 1 worth of security. Far worse is were actually now in the system of negative returns, meaning every dollar were spending is actually making things worse. Because its proliferated and escalated the problem. And we see this every day play out in the newspapers. Those of us who are seeing victim clients. The bad guys, when you defeat them, they dont just give up. They say, i used to have a life of crime, now i live a life of law. It doesnt happen. They find alternate routes. We just heard about nation state using stenographer through twitter accounts to control boughtnets. It doesnt stop. And so what weve done is weve spent our money, and its resulted in an escalation of the problem. Similar, for example, if somebody were to if someone were to break into your place of business and the response was, well, why dont you put up a 10foot wall at the price of 1 million around your complex, then they go out and purchase a 15foot ladder for 30, and then the response is, you know what . 15foot ladder, make it a 20foot wall. We all know whats going to happen next. But that is happening to us here. So not only are we falling victim economically, to the fact that our intellectual property is being stolen, fair markets are being distorted, our bank and finance system itself is vulnerable, as is the rest of critical infrastructure, but then our response has actually furthered our economic dependencies at a loss of viability for our security. So where do we go from here . Thats really where the second panel is going to answer the questions. But certainly, i think that Threat Deterrence has to be the predominant focus, using all elements of national power, military, law enforcement, and consideration of the private sectors role. For that, we have a Global Private sector. It can be very influential. This is not just a u. S. Problem, of course. And as we think about that strategy, the other thing that we really have to be concerned with is how the political and Economic Warfare that were facing can result in a crisis of confidence in our country, which could, of course, be as severe or more severe than actual consequences. I think were facing the real potential of a crisis of business confidence, the ability to be protected in todays global economy. Consumer confidence, the ability actually to do anything online any longer, to take advantage of technology. Like Infusion Pumps, insulin injection pumps, automobiles. It can face a consumer backlash. And citizen confidence, if we feel that the country cannot protect us. And its actually subject to extortion at any given time. In this country, we have Police Forces who routinely are being extorted through ransomware, and which organized criminals are breaking into police force computers, not only police force computers, and telling them if you dont pay us our ransom fee, well delete or destroy or just not allow you to have access ever again for your records. Police forces are paying extortion to foreign criminals. What happens when that happens at a nation state level against us . Is it already happening and you just havent been apprised of it . And with those remarks, ill pass it on to the distinguished congressman. Thats fantastic. Time for a drink. Its afternoon, yes. We are really pleased to have chairman mike rogers addressing us today as a former member of the u. S. Congress representing michigans eighth congressional district. A member of the u. S. Army, fbi special agent. Mike really is in a unique position to shape the National Debate on a wide variety of issues, including this one. He hosts the nationally syndicated something to think about with mike rogers on westwood one. With his time in the u. S. House of representatives where he chaired the powerful house intelligence committee, was a member of energy and commerce. Mike built a legacy as a tireless and effective leader on cybersecurity, counterterrorism and National Security policy. We welcome you, mike. Thank you, sam. What i learned today is steven was an fbi agent that was apparently assigned to catch smart criminals. I was the fbi agent who was apparently to catch the dumb ones. So when they needed a door kicked in they called me. When they needed to catch the guy in russia in his mothers basement on the computer they called you. Ive had the opportunity to meet and spend some time with all your panelists youll see today. And all of the authors of the book. I highly recommend it. Believe me, ive read a ton. This is to the point, provides you some unique talking points that is a little bit different. A little out of the box. I love that thing. I spent this weekend reading it. When i walked into the room today with all the panelists, it struck me that the iq on the room on average went down 15 points. I dont know why that happened. Oh, come on, people, lighten up, for gods sakes. Two things have happened in the last decade we just dont talk about. We dont want to talk about it. We have had a strategic erosion in our dominance in both cyber and space. So you think about in 2007, when the chinese launched a rocket that took out a satellite humming around the our earth at about 11,000 miles an hour and hit their target. Thankfully it was their own. You think that from that day forward, and then a whole host of other activities, including what someone called killer satellites, americans dominance in space came to an end. We no longer were uncontested in space. You think about how reliant we are on space for everything we do in our economy. That was a fundamental change. And that meant policy makers like us had to start figuring out how we counter that. Now you have to launch a satellite that not only can do its mission set, but can protect itself. That is a whole new ball game when it comes to space. About half of all the satellites up there dont belong to the United States. Some of them are up to some pretty nasty things. Then you take cyber. We watched this problem happen year over year over year. Heres the thing. Heres the good news about the former dni mcconnells comment, if we were in a cyber war, we would lose. If we were in a cyber war, we would lose, thats the good news of it. Heres the bad news. We are in a cyber war in the United States, and we are not winning. Its that bad. And it is getting worse. So you think about where we are today. Most of our Financial System is under attack. Some successfully, some not. We now know, and youll hear from other panelists about how the new generation of technology, which we pride ourselves in, making a car do amazing things, is now susceptible. Airplanes have been hacked. Theyre susceptible. Our electric grid has been penetrated. Its susceptible. What they dont tell you in the second part of that, dont worry, nothing to see here, move along, weve got it fixed. Why . Because we dont. The fbi just came out with an interesting report that year 13 over year 14, there was a 53 increase in economic targeted American Business espionage. 53 increase over one year. And the bad news was, it was outrageously bad the year before. Why . No consequence. All right . They have been absolutely able to get away with it. China has built an entire economy on stealing intellectual property, not only from us, but from our european allies and other asian allies. Anyone that has a company that has intellectual property is subject to getting it ripped off. And likely, they have. Weve watched this problem get worse. I get worked up about this. I just read today where department of Homeland Security has issued a letter in opposition to the one piece of legislation the senate is ready to move here called sissa, for those of you who are familiar with our bill called sista, all that tells you is weve got problems with acronyms in congress. For the one reason that it allows companies to directly go to certain intelligence agencies to share malicious threat code. Which by the way, has been happening intermittently in the past. So the one thing that we looked at in congress and said, heres the biggest problem, we have to foster sharing. Everybody said sharing is the key word. If we can share malicious source code in realtime, zeros and ones at light speed, we might, might be able to put a dent in this. So what youre seeing, and why we have watched it happen year over year, now theres a bill out there that i think could be very, very productive, allows and protects those relationships so that companies can feel comfortable knowing that their information is safe in saying, we have this malicious source code. You have to help us with this. We dont know where it came from. Now our own government is going to work against itself for god only knows how long, again, over the details of how we come up with a cyber sharing regime in the United States. In the meantime, i mean, i think the first bill was passed in 2013 by dutch and myself in a big bipartisan vote in the house. Were going on certainly two years. Likely it will be three years. We still cant come together, the white house cant talk to the congress, the senate cant talk to the house, the house cant talk to the senate. In the meantime, how many trillions of dollars have we lost in potential economic gain, and real dollar loss . Billions. Billions and billions and billions of dollars. The one trump card that they will throw down, and they did it in the dhs letter to stop the legislation is, quote, we have privacy concerns. That stops everything. In the meantime, the russians, the chinese, the iranians, unfortunately now the North Koreans, we could list about 15 other nation states, are already on your networks. Theyre stealing your information pretty much daily. At ease, again, with no consequence. So think about where we are today. Space, we are no longer the dominant player in space. It is now contested. Now, our technology is better, clearly, in many cases. But now we have to worry about the safety and security and the survivability of many of those old systems, including some of the relatively new systems that we launched into space. Big problem for any business anywhere in the world. Let alone how tied we are to the economy. On cyber, getting our clocks cleaned. Now the Intelligence Community is going to set up its own version of a cyber center, to try to police up its act. I think this is probably a good idea. We didnt even know all the capabilities amongst our own intelligence folks. Why . People kept throwing down the privacy note and we stopped everything for two years. We couldnt get the Intelligence Community together to share the information in a meaningful way. Nobodys reading emails. In order to push back on what we know is a serious and growing threat to the United States. Couldnt quite get ourselves there. And the last part of this, in 2014, was a huge policy shift that we all, as americans, kind of yawned and moved along. We had two nation states, not the most capable on our list of nation states we worry about, make the calculated decision that they were going to use their nation state capability to exact an economic punishment of a single United States business. Now, normally, if somebody went in and blew up somebodys warehouse and they fired a missile or sent some sabotage group from somewhere across the world into the United States to do that, act of sabotage to further its political gains. Clearly fits in the definition of terrorism at the very least. We saw nation states in 2014, and both of those cases now are public, one is the sands resort casino and the other is the sony case, both of those involved nation state cyber capability and cyber actors. The problem, and i think what the panel has said today, is where is the deterrence to doing that . There is no deterrence. Theyre not going to stop. Theyre actually going to increase their ability to have the capability to conduct those kind of attacks. And they will continue to Pick Companies of which they find vulnerable to do economic and real destructive things. The sand resort casino, it was a similar type of arrangement where the ceo gave a speech about why iran should not get a nuclear weapon. They decided that wasnt an affront enough they could use their capability to attack the sands resort casino, they ended up penetrating a casino out in pennsylvania and worked their way back to their headquarters, took them a long time to do it, they were determined, before they did millions of dollars worth of damage at that headquarters. For a political purpose. Americas response . Not much. And so we have kind of yawned at this notion that we have this problem, but as long as i can get to starbucks with my app, and i can pay for my parking on my iphone, everything must be okay. The problem is, every day we erode our ability to protect a growing and more complicated system. Lastly, we are getting ready to add 28 billion new applications to the internet. Everything from your garage door opener, and i dont know about you, but every time i walk by my refrigerator in my house i think its working against me already. Thinking that its on the internet working against me as well. This is a huge problem for us. And i think youll hear a little bit about this on the second panel. Especially with the automotive focus. Were going to add all of these devices, not one ounce of security prevention has been planned in any of it. And one of the biggest things that happens to you when you have an application on your network is if you talk to your security folks, is they probably dont even know that application is on their network. There are Good Companies coming out now, understanding how you map adequately map in realtime network. It is harder than it sounds. Nobody has completely 100 mastered it. Some have come close. But on your private sector networks, there are huge vulnerabilities built in. That even the best security companies, so you ask, why does a Serious Financial Institution on the west coast get penetrated . They spend 250 million a year on security cybersecurity alone. 250 million. They can penetrate it. Why . Its because the complicated nature of network and how you manage the network, and even understanding what application is on it. I always say that this is not just a technology problem, its an anthropology problem, too. Its a people problem. If you wonder why the chinese have stolen as much data that isnt related to a criminal act and from medical, and the list is pretty long, we could be here an hour going down the list, certainly the opm, they have lots of really detailed personal information, why would they do that . 85 of all the success rate of a chinese penetration of your network comes from a phishing email. Imagine the email i can create if i know everything about you for the last ten years, and i mean everything. And i also know when the last time you you went to the doctor, and exactly what you had done at the doctor, and what your billing status is. Imagine that email that comes to you at work that says last week, mike, you had your knee looked at, you had it xrayed, i think i screwed up on the billing cycle. Can you confirm this is your xray . Yeah, i was there last week. The email came from my doctor, at least it looks like it came from my doctor. I click on it, theyre in. 85 of the Chinese Success rate. They just increased their target rate by 63 . Im not the smartest guy in the room, but in the fbi we would call that a clue. Weve got problems abreuing. I appreciate the discussion. And thanks for including me. Thats fantastic. We have about 15 minutes or so to really open up for questions. Focusing on the evolving threat. And from this panel, it became clear that the evolving threat is both from our adversaries and against ourselves as well. So i dont know if someone has a mic, or small enough room. Sir . My name is george. My question is, is there like any difference in the approach to cyber warfare between the public and private sector . Can we say the private sector go one way, the Public Sector go another way . Is there an approach to that . Thank you. I want to take a little bit of a different perspective from my panel. I worry about this. 85 of the networks in the United States are private. And contrary to popular belief, and the National Security agency is not on those networks. Theyre not. Not unless they have a warrant to be there. And that is highly unlikely. And so what happens is, you have this Intelligence Services overseas trying to collect information, bring it back to protect the government. What we want to do is share that information in realtime, so the private sector can protect themselves. Thats where we are today. Its not working very well. Sharing is terrible. Nobody wants to do it for reliability reasons. Good reasons not to share, that hopefully we can fix, heres the problem with the private sector saying to heck with it, i think ill go ahead and flick whoever i think did this. Attributes, determining that attack to a nation state or International Criminal organization, there are capabilities all over the map. Some can do it very, very well. Some think they can do it very, very well. Some dont have a clue how to do it, but wouldnt stop them from doing it anyway. The government would then be in the responsibility of how do i protect 25 businesses from what would be the second order impact. If i attack you, you come flick me in the forehead, i guarantee you theyre not going to sleep on it overnight. Theyve already been trained theres not much of a consequence to doing this. How do you contain that . If we dont have a good policy on this i always argue, youve got to have a good defense before you go out and do something bad to your neighbor. If youre going to punch your neighbor in the nose, hit the weight room for a few months first, because hes likely to hit you back. The problem is, we have no good defense today for the 85 of the networks. So the companies who are really good at it, they would be fine. A lot of companies i wouldnt have any problem doing that. The problem is, what do you do when they take out the 15 companies that are their suppliers that cant withstand a cyber attack at all . Now what do we do . Now we have an engaged private sector against a nation state that were watching happen as a Government Entity . What do you do . Now from a Government Entity, we have all kinds of ways to stop to deescalate any event. You have none of that in cyberspace. We have to get all of that right before we allow them to have it. Real quickly. I just love being on this panel with these gentlemen. Its awesome. Three problems. Youve identified a critical question. One, the adversaries were talking about dont differentiate between public and private. In many ways, you know, the autocratic states in particular, its all one thing. Their economic power and influence is a part of state power and influence. The chinese have actually identified their banks as a strategic asset. So starting principle is that our adversaries in this space dont differential yat. Secondly, if we think about National Defense resilience, health, you know, our health system, our Financial System, our infrastructure is a part of that. So in some ways, the clear divide between Public Private in many ways in this environment doesnt make a lot of sense. The third point i would make is, i think one of the challenges, and mike referenced this is, how we interact between the public and private sector. Information sharing is sort of a leading edge of that question. But also, its a fundamental question of our National Security architecture. How do we actually enlist the private sector in a way that enables them, defends them, and makes us part of a National Resilient campaign when theres a clear blend . And one sort of way of thinking about this, and maybe this is where mike and i disagree, i do think theres a way of thinking about this a bit more aggressively. A cyber privateering model, taken from our constitution, the founding of our republic came at a time when came at a time when there was much unease about Maritime Security. We have a provision in the constitution for letters of mark rereprisal for the government to actually leverage privateers in the Maritime Security domain precisely because there was this blend of threats and this blended environment. I think we need to start thinking a little more aggressively because the environment itself doesnt differentiate between public and private. We dont want to do damage to our constitution or the way we foster the private sector and protect it but we also cant ignore the fact that the private sector, sand, sony, jpmorgan are a part of our National Resilience and economy. You want to hear one more question . Actually, i wanted to add one thing on this matter. Its something that both chairman and juan talked about when discussing the differentiation in our country with whats government owned and whats private sector owned, but it goes a little bit past that. In our country and most of the western countries, theres a very handsoff view to the internet. You have to let technology innovate and governments have it as a philosophy to not get overly engaged in the infrastructure. Thats not happening everywhere in the world. So the countries that weve already mentioned that get thrown out, russia, china, north korea, they are vulcanizing the internet, you just dont realize it. They have filtering in place. They own the infrastructure, theyre monitoring, they can take it up, turn it down, have resilient approaches. That relationship we have with the private sector were hands off but at the same hand its not resulting in secure outcomes, isnt being followed everywhere. What were seeing is as the rest of the world, those who tend to be the aggressors are really locking down their infrastructure, were going in exactly the opposite direction in a way that really would not be consider ed i guess obvios when we do other things. For example, if i were to say i could develop one cell tower that has so much power that al you need is one cell power, youll always have your four bars wherever you are in the country, the only problem is it will give you cancer. Everyone would say thats a ridiculous invention. Dont use it about i said i could build a car that would go 2,000 miles per hour. Youll be in california before you know it. The only problem is our roads arent set up for it. Everyone would say thats the most ludicrous idea ive ever heard. But you can develop anything regardless to the security consequences to our country. We really have to start thinking about what were permitting and that relationship between the private sector and the government really has to shift and common cause to health, safety and security. Great, thank you. Well take a couple of questions. I just want to reference in the monograph, both in juans chapter and in michaels chapter, there are discussions about letters of mark and, in fact, theres some really interesting footnotes about some law School Articles that have been written specifically about mark in cyber that i comment you to. Good afternoon. I just want to follow up on your last comments. A lot of the focus is how could we make the network more resilient. How do we, at what point do we flip the model like you just alluded to and Start Holding the actual manufacturers accountable in most of these intrusions, sony or elsewhere utilizing a vulnerability in adobe or flash or some other Vendors Software that is running on that network . So what time do we Start Holding them accountable and start cleaning our own house . I think its the wrong perspective, quite frankly. We dont demand perfect security in any other aspect of our life. I would never dream if my house got burglarized i should start going after the architect and the contractors to say that someone was able to tunnel underground. Were incentivizing products that dont have that level of security but never will. I cant say there cant be better job encoding and there are companies that have been done an excellent job and im all for it. But the fundamental issue wouldnt change that nation states and organized crime groups that are persistent and determined will always be able to break in sooner or later because it is impossible, based on vulnerability mitigation efforts, to secure a dynamic interoperable environment, which is what we have in the internet. The only time you see it in the physical world is Something Like a bank or a fortress. It doesnt move and it doesnt change much over time. You could really secure it. Once you say were going to actually meet up with everybody and were going to change all the time through updates and upgrades and connections, thats the fools errand. So the real choice here is how are we going to start taking some of this money and putting it into a robust conversation and intellectual analysis, right, bring actual analytic standards to options analysis when these things happen, how do we build platforms that when necessary are not better necessarily at being secure but are a lot better at detection, attribution and then figure out what our policy choices are. We might find out despite i think you took the card on this one, that some of the systems that we need the best security for coincidentally and a good coincidence have the least privacy concerns . Like the electric power grid. If you work for the well, forget about smartgrid for a second. Standard electric power grid, Everyone Wants to have perfect knowledge of who is on it at any given time. Very low privacy demand. So thats where i would start. Not by necessarily cleaning up the house from a vulnerability mitigation point of view which god bless if it can be done but figuring in real policy choices to give to our leaders in those areas that matter most. Just real quickly. I think theres a different dimension of liability thats enabled. Because the private sector bar and the plaintiffs bar to actually be a force in this environment. With the attribution revolution, theres actually an opportunity to think about class action lawsuits, key tam actions, victims of malignant Cyber Attacks, that allow victim companies, individual shareholders to actually go after companies that are taking advantage of the environment. Chinese soes that are using stolen data, why arent they subject to not just Government Action but potentially even private litigation . So i think the question of liability is an important one but i think we need to flip the model a bit more and power the private sector to actually be an actor in deterrent. I think we have time for one quick question. Michael . Just to get it on the record on this. Just you get you all on the record with this how fast the tables change. Is it fair to say that the u. S. Private sector in cyber has no right of selfdefense according to the law, that that is our policy . We have no right of selfdefense . And the same way theres a duty to retreat, we have no right of selfdefense. And i think id like to begin with juan because you advise banks on this. When you listen to the lawyers and the lawyers seek to work with you on this, do they feel that the bank has a right to defend itself when it comes under attack by either criminals or by nation states . I think part of this is how you define defense, right . Because if you define it passively, of course weve got a right to defend and create layers and redundancies and the criticisms is they havent done those. They havent done a lot of to cyber hygiene they need to do in terms of employee awareness and et cetera. Certainly we can do that. Theres a lot of reticence in the private sector to the chairmans point to actually getting involved too actively. Theres a lot of company that really dont want the very idea of hack back to be sort of active defenders of systems. They want the government to do it. They want more information to be able to do it themself. So in that sense, if you define defense broadly, yes, they do. Do they have an active defense role to play at this point and is there a legal structure for that . No. I mean, defense of personal property is a justification, right . So its an otherwise legal activity. I think its very uncertain. We havent seen prosecutions against companies. That might be prosecutorial discretion. We dont know what would happen if there was a case that was taken up. Unfortunately, a lot of this is theoretical, but what i would certainly say is theres no certainty in this area. And businesses, unlike individuals, who are more likely to roll the dice, businesses hate uncertainty, right . And were a nation that cant even get a National Data breach law, right, were stuck with dozens upon dozens of individual state laws in the area of data breach notification, right . So whats the chance of a company figuring that they have certainly of action even within the United States no less how that might be observed outside of the country where they are likely doing business. So i think the short answer is do they theres no clear answer to that. But that factor is enough to make it that big businesses that are responsible are not going to touch it. When you Start Talking about extra territorial aggressive defense, thats a loser from the point go. If you do not have proper legal authority, i think its a disaster. Mainly because, in a stand your ground circumstance, youre dealing with a personal threat to your life in the way the law is written it has to fit that criteria. This you would never make that legal argument here, number one. And number two, again, when you go when you decide your going to breach territorial jurisdiction and go after someone, you have opened up a can of worms of which is well beyond the scope of your threat. And thats where i think we have to and our policy is not there. We dont even in the United States have