Program. We are thrilled and honored to have you. Thank you very much, again. Police work in the subjects dose Cyber Securitys chief of staff. Will to the final day in what has been an amazing summit. We have three general sessions with the fireside dna haynes. If you have enjoyed dynamic conversations both on and off stage, picture make sure to bookmark the state and local summit, march 19th and 20th. Additionally, we have a dozen webinars coming out this october for Cyber Security awareness. This morning, we begin with a fireside feature, Deputy National security advisor or cyber emergency technologies. Fireside is entitled building a National Strategy to protect our nations critical sectors. The white house has taken very active role in engaging with the public and private leaders to foster and embrace technological change but also to ensure that security and responsible guidepost are included. This mornings fireside will be moderated by brad mcgeary, executive Vice President , booz allen. The featured speaker for this important discussion, the honorable ann newberger. Deputy National Security advisor for cyber and emerging technologies National Security council, the white house. Please join me in giving these two a warm welcome and round of applause. Good morning. Mr. Berger, i think i can speak for everyone in this room that i am truly honored to be with you today and welcome back. Thank you, it is terrific to be here. We are excited to have an important conversation about Cyber Security and National Security and why dont we get started. We are going to take a moment to reflect. You are in the third year. You have accomplished so much and there is so much happening. Ransomware, russian attacks on Critical Infrastructure. Start by giving us your thoughts. I am really excited to talk about the hard work and the victory present in biden has worked on but first i thought i would paint the picture pragmatically regarding the cyber environment. First, defense is more expensive and complicated. Attack is practically free. So that and balance one key piece. Second, we have seen a shift from hardware to software. Anyone can do software and there are Software Packages readily available which makes the ease of attack simpler. Several individuals talk about Software Design and finally, we are a nation of law, regulation and morals that guide our work. Not all adversaries operate in the same and it also makes it a complicated space when we talk about Critical Infrastructure which is owned and operated by private dose attack is easier. The shift from hardware to software and regulations to make the victories i will talk about while they will always be in this forever war. To your point, as we look at that, i often think about three piece. My core Lessons Learned, what are they . Preparation, International Partnership and the private sector. And we ask ourselves at the white house the core question to see where we are and track the progress of cyber in all the work that we do so the first one preparation, certainly ukraine has showed us that the work that was done to prepare after russias first invasion of ukraine in 2015 to prepare towards this one made ukraine far better prepared for the significant attacks. I recall in the three weeks before the war from an intelligence perspective, we were talking with european allies and we expected russias invasion to come. We were talking with the ukrainians about the fact that the Energy Created fundamentally connected as part of the old grid to the and we all know it is incredibly difficult to defend an energy grid and they made a tough call. They have been working to prepare. They made a tough call to disconnect from the grid and connect to the european grid but that positioned them to be far more prepared. The question to the united states, are the digital doors and windows 12 are Critical Infrastructure locked . Our systems on . Before the biden administration, we cannot answer the question. Not because folks were not doing terrific information sharing but because fundamentally, the question we need to know, there are 97 critical pipelines in the country. How have they passed the most recent vulnerability . Have they done assessment of their operations and key operations . So the work president Bidens Administration has done to put in place regulations in various sectors that require owners and operators to do particular things now give us the ability for pipelines, aviation, water. And i will talk about the additional sectors we are working on to have a key rating. That is Game Changing because in the runup to the war when President Biden turned to us and said, what is the risk of blurred dose russian blowback, he was working with our european and asian allies to put in place. We were able to answer that question for the pipeline sector because that was the first one under sector dhs Emergency Authority or regulations had been put into place. The first measure of our preparation as a country, the answer to that question, we track it closely with key regulators and we Work Together to ensure we can answer that question better and better. First, do we have a rating for each Critical Infrastructure owner and operator . And second, how do we make sure we get 208 . Second, International Partnerships. Key question, every piece of knowledge and intelligence and Cyber Security advised that we have, have we shared that in a regular and ongoing way . We will talk more about the number underway but that is a driving question. President biden always asked because partnerships are so much a part of what we do in the private sector. The problem balance of power has shifted. Whether it is the tremendous work never did companies have done to help ukraine, moving data to the clouds, the balance of power shifted, the innovation and Cyber Securitys are defenses. A key company reached out to me the evening of russias invasion of ukraine and said, and we see some signs of destructive capabilities being deployed. My first phone call to Key International allies and partners in my second emails connecting to them. To that point, that knowledge, that innovation is so key so those three keys and those three questions are the way we organize ourselves. In defending Critical Infrastructure. When you talk about some of the Lessons Learned, thank you for sharing that. I would be interested in terms of how you are thinking about Lessons Learned and incorporating those into your future policies. President biden talks about how technology and cyber our core to geopolitics, today. And indeed, we pick the area of artificial intelligence. It is on everyones mind. We know that the combination of ai, advanced telecoms, quantum sensors with the position they bring and the advances they bring in terms of measurement will drive ahead technologies and we have had breakthroughs over the next three years. I just returned from brussels where, in september, we signed an agreement with the European Union to focus on ai societal good together. And our goal is not only to drive the technical approaches and i will talk about what the areas are but to show that the u. S. Could do together that we could put in place data protection, privacy protections that are still poor to how we compete with our values. Because certainly, for certain areas, think about the area of surveillance, there are significant perils that ai brings. We look at the policy approaches, we think of the promise of emergency technologies and did our policy approaches, we want to make sure we are advancing on the promise hence the agreement with the European Union in those five areas and also very much focused on the parol. And as i talked about, we are a nation of laws and regulation and morals in terms of privacy that drives our work, that is core to our competition in that space particularly and just for the group, those five areas are extreme weather predictions, agricultural optimizations driven by the impact of extreme climate, droughts, floods and how we grow crops, how we ensure that we can still have the Food Production we need, optimization of hourly to shower electricity grid. We are trying to drive to electronic vehicles, the connecting and charging. So that infrastructure is built to support that group moving forward. There is such exciting advances between the u. S. And the area of medical imaging, detection, for cancer and finally, emergency management. How do we respond effectively to emergencies and certainly the role of satellites and helping us have the imagery to respond to emergencies and how we do detection more effectively and efficiently. We worked on those projects. So those guide our policy, managing the parol, really pressing forward in the progress. Thinking back, you are talking about the progress made in terms of Critical Infrastructure, kind of looking back and involved in the space, we really need more progress than we have in the last 10. It is remarkable but we have seen a lot of the Critical Infrastructure. I would be interested in what your terms of perspective is, continuing to increase that partnership. A really good question. What has underpinned the significant progress that you say because i agree has been more progress in the last three years than the last 15. From a voluntary model to add to that the regulatory model because we recognize that. I mentioned earlier when President Biden asked the question of the war in ukraine, what is the risk of low back . As a good and private partnership can be, it is very different when one shares thread information, when one shares the road availability and the regulators can say, what is your plan to fix this . I am going to hold the company to that. A part of that is of course the partnership and that is why we need both models together. We need to show that information actively. We also need because they know the sector well. That gives us Critical Infrastructure. Critical infrastructure in this country is a zero failed mission. As we travel around the world and talk to policymakers, we are all grappling with that. The vulnerability that you rightly pointed and the fact that we owe our citizens the confidence that they will have clean water, power. They will be able to get gas to go to work in the Pipeline System will not be down for five days. A pretty basic criminal attack. So that has been the biggest fundamental shift and like i said, underpinned by really fantastic information sharing. The Intelligence Community. A shout out to the team. Chinese attacks and Critical Infrastructure and laid out practical actionable mitigations to help companies Work Together and then finally, really finally is the work we are doing with the private sector to drive more secure products. The white house launched a Cyber Trustmark last month and the goal of tribal Cyber Trustmark is bridging communities. Consumers tell us they want more secure in their homes, schools and businesses. Companies say, we will build more secure tech and how do we differentiate ourselves . And our goal is to use our integrity. People trust and mark. People trust an energy star because they know there is the government standing behind that. Standard and certification so that launched a shout out to the general mild the fcc. The man who did the work to put that together. Registering a Cyber Trustmark, building standards following up on the executive order two years ago. Our aim is to have market products with the Cyber Trustmark in stores, online. Amazon has agreed to prioritize it. Thanksgiving of 2024, please look out for that. Some of in brussels, those can be sold in multiple markets and now the department of energy is working on the standard for smart router, im sorry, for smart meters and this one is working on smart routers so our vision is to expand the number of products that have a Cyber Trustmark and run a Consumer Education campaign and this really shows you the way we have been working across kind of building the team cyber approach. Standards, the fcc running the program under their authorities , Consumer Education, department of energy, building standards for things like smart meters and fundamentally, companies have been playing a role, raising Cyber Security to meet those new standards. We are thrilled to be a partner to help consumers. I think that is the final piece of that. This conference contains a lot of different product companies. I can tell you one of the themes i have heard is secure by design. One of the other Lessons Learned or talked about was around foreign partnership. Certainly played allied partners. Certainly played a key role in russia and ukraine as we shift focus to the pacific. I would love to get your perspective around how the government is thinking about continuing to strengthen these partnerships and the role of the coalition. It is a great question. President biden talks about partnerships. Everything we do in the geopolitical world, we cannot operate alone. The more countries we are operating with, positive progress in the world and i will talk about three examples of approaches that we have been walking working on. President biden welcomed the president of coast area, to the white house last week. The summit for democracy. From a cyber perspective, costa ricas president called out, the first one in latin america to called out russias invasion of ukraine. I think you used the word criminal. And they face significant Cyber Attacks thereafter. A shout out to the fbi, the u. S. Ambassador of costa rica, a terrific woman. The fbi had a team on the ground the next day to ensure that we could help her rapidly recover because all of the government systems, the systems ability to order medical Systems Online were all disrupted. And then the state department worked closely to put together a 25 million grant to help fundamentally costa rica build out the cyber resilience. That money is already working on the ground and part of that is money flowing through south to build Security Operations center for the country and for the military. And finally, recognizing that the nations infrastructure, the telecommunications is a foundation of security, we did the first ever financing grant of 300 million to help costa rica move off the infrastructure to trusted infrastructure. And again, a shout out to the director for her work doing that firstever 300 Million Financing grant for the 5g trusted infrastructure in costa rica so that is one example. The focus to ensure that when a key partner has a major cyber attack, we can help with the nations resources on the ground to help them recover quickly, to help them build the resilience and fundamentally to ensure there Telecommunications Infrastructure which is the foundation of the country is secure. The second model of International Partnership initiative which will be convening october 31st in dc. The number of members growing from 31 to 47. Global partnerships defined crime. In the u. S. , it is disruptive hospitals, disruptive schools. Companies are facing that and it is a major issue and a problem that as mr. Moody said, you have attackers in one country. Largely, they are based in russia they are often beyond the reach of law enforcement. So convening the Global Partnership for the united states, designed it, built it is a key part of our work. We are working the firstever statements on a coordinated approach to ransom payments, what the policy will be that will be a major take away and a statement in that area. And the final example of our International Partnership is a virtual cyber incident capability response. Europe faces significant russian attacks. There have been a number of them. We want to assure that all of the members of nato can quickly and in a coordinated way respond. International partnerships is a part of the work we are doing and a major part where we worked hard to innovate with different models based on the different kinds of partnerships that are needed. Some bilateral, some are very smaller and focused. A lot of industry in this room and across the united states. A tremendous capability around Cyber Security in support the us government, how can the industry help our partners . It underpins. When we do a 25 million grant, that is for a private sector, rapid response, capability. Certainly the fact that the u. S. Is one of the leading innovative nations in Cyber Security is what underpins our ability to project our ability to secure cyberspace. The information sharing, frankly between companies. The power of connecting the Network Internet routers within point detection at each endpoint and sharing that happens across our private sector is also a force for good. Driving more of that. And finally, you mentioned by design and my close colleague. So that consumers can tell if it is secure by design and build secure. Lets have a vision together. That is for the united states. By the end of 2025, every iot product, every router in this country has a label so that consumers are buying more text. Otherwise, with that approach, we can Work Together to enable more secure cyberspace. The glass is halffull. He talked about ai, every conference. Here this week, a lot of conversation around artificial intelligence. More a lot about the opportunity but there, it presents risks and the ambassador talked about trust. So i would be interested in your perspective around the opportunities and risks associated with ai and now we move toward that trust model. The white house approach because ai crosses every part of our society, the impact on jobs, the impact on industrial manufacturing, the impact on equity. We want to make it a more equitable world. If ai models are trained on the data we have about existing loans, they may not be. How do we make this a force for greater equity . The National Security impact, the Biggest Issue we have in the Intelligence Community is how to make sense of all of the data we collect and how to enable on how to become an intelligence consumer. We have thousands and thousands of reports. Today, if intelligence wants to know everything about a particular advance, one has to read all of the reports. The ability that can summarize the most significant information in most recent information is incredibly powerful to make sense of the wealth of intelligence we produce. Massive promise. In the area of cyber defense, that is why we announce the dover challenge to open that up and say we need to advance ai. So it really massive promise. As we know, the approach the u. S. Has been taking to drive for a set of volunteer companies. How they build models, of a test models. The day goes data they train on in the testing done. The second piece is an executive order. And finally, work on the hill which is the regulatory approach to address some of those but we want to make sure that in the promise and peril, we really focus on the promise because one carol is that we are focused on the peril and we dont make progress. And when i think about what would be to your point, the kind of promise in the space. We talked about keeping people safer, what if we were able to predict the fires in maui and use that to drive Emergency Response and evacuation . I grew up with a cousin who is blind and i would often take her for walks and it was tremendously humbling to walk with her. Because my brain automatically adjusted to the uneven. I did not even see it until she would stumble and i started looking for it and when she commented to me, you know, the indent in the road for carriages , she says that is how i stumbled into the gutter. So she walked with a stick and she needed my quiet voice from an independent perspective, it was very hard. So think about what ai can do for folks with disability. Connecting with a satellite to find the route, to identify when there are uneven part, a fast moving vehicle. That this person wont necessarily hear. There is tremendous promise. At the end of their lives and i think it is a society, we want to make sure we make that progress even as we keep an eye on the perils because there are significant perils. Specifically when we think about an authoritarian model. And commune for example, extensive advances in vision to capture all of the data, movements and communication. Last question, government and industry together, talking about the nation. Challenging problems and opportunities. I would love to get your Closing Costs on a path forward together. As you said, it can only be done together. The Cyber Security industry is the underpinning of National Defense and Critical Infrastructure. So the doors open for innovative policy ideas. As you said, this administration has done a great deal and a shout out to the government and partners around the world to drive more rapid information sharing, to set regulation so that the Companies Know they must have the basic digital cyber locks, digital on their doors and windows and a digital alarm system to detect threats but the way that we have a shared commit to that americans and individuals around the world can feel their safe inside of cyberspace can only come from that Partnership Together and a really positive example was the recent backtoschool safety event. What we are seeing in schools where criminals are attacking schools and leaking sensitive kids data online is unacceptable. Multiple companies stepped up at the summit. A shout out for example to craft which is providing Free Services for schools with less than 2500 kids as i recall, the entire state of arkansas is moving all of their schools with under 2500 to and if i recall collectively correctly, Free Services in that area, as well. For an education instead of coordinating council, for guidance, requiring more secure tech, on the ground in multiple states. That is an example of what we each do what we do best that we do it together in partnership with the measure to say, every kid in america is safe when they go to school and i think the joint measure of that together and the individual work is what is so inspiring and what is so inspiring is we see everyone here together so it is exciting to be here, as well. Thank you for the conversation. Take you for your service. And thank you for being on the front lines of our nation and bringing us together in this important fight. It was an honor to be here and thank you to