[music] frees welcome cybersecurity chief of staff charles. Good morning, welcome to the final day of what has been an amazing summit. We have 3 general sessions enclosed with the haynes. If you have enjoyed conversations both on and off stage make sure to bookmark billington, march tenth and 20th. We have a dozen webinars coming out this october. Make sure to bookmark that too. This morning we begin with a fire side featuring anne for cyber and emerge technologies. The fire side is titled building a National Strategy to protect our nations critical sectors. The white house has taken a very active role in engaging with public and private leaders to foster and embrace technological change but also to ensure that security and responsible guide posts are included. This mornings fire side will be moderated by bradd madery, executive Vice President , the featured speaker for this important discussion, the honorable anne newburger, cyber and emerging Technologies National security council, the white house. Please join me inwh giving these two a warm welcome and a round of applause. [music] all right, good morning. Good morning. I think i can speak for everyone in this room that its an hon recover to be here today and welcome back. I know that you just got in from a flight last night. Good morning all. Well, we are excited to have an importantd conversation this morning about the cybersecurity utand National Security and why dont we get started . Great. We will take a moment to reflect. Y youre in the third year of your role. You haveye accomplished so much and theres so much happening, ransomware,ng russia, ukraine, russia attacks on Critical Infrastructure. I would like to start by getting some of your thoughts around some of your key Lessons Learned . Im excited to talk about the hard work and the victories President Bidens team cyber has worked on but first i thought id paint the pick hour for a moment pragmatically regarding the cyber environment today. So first, defense is more expensive and complicated. Offense, attack is practically free. So that imbalance one key piece, second shift from hardware to software. Anyone can do software and there are Software Packages readily available which has made the ease of attacks simpler. Several individuals in the military talk about Software Defined warfare and finally, we are proudly a nation of laws, regulations and morals that guide our work and makes it more complicated space particularly when we talk about defending infrastructure and governed by strict rules regarding domestic money occasion. Those 3 principles, attack is easier, its easy, the shift from hard wire to hardware to software, make it a victory that i talk about while hard one and significant, we will always see in this forever war. As we look at that, i often think about 3ps, capture my core Lessons Learned. What are they. Preparation, international partnership, and the privateep sector. We asksk ourselves at the white house a cool question in eachf that to see where we are and track the progress of team cyber in all the work that we do. The first one preparation, certainly ukraine has showed in 2015 better prepared for the significant attacks it would see. I recall in the 3 weeks before the war we were talking with european allies and we expected russias invasion to come. We were talking with ukrainians about the fact that they were, energy grade, fundamentally connected as part of the old soviet grade to the russian grade. As we all know its incredibly activity to telephoned an energy grid thats physically connected and they have been working to prepare. That positionednn them to be far better prepared. That preparation, the question for us in the United States are the digital doors and windows of our Critical Infrastructure locked, are our digital detections on. We couldnt answer the question. Not there wasnt good Publicprivate Partnership but because fundamentally the question we need to know there are 97 critical pipelines in the country, how have they patched the most recent vulnerability, have they done Vulnerability Assessment in key operations. The work President Biden and the administration has tone to put in place regulations in various sectors that require Critical Infrastructure owners and operators to to particular things gives us the ability for pipeline, for aviation, for rail, soon for water and i will talk more about the additional sectors we are working onto have an abcd rating to have Key Companies in that sector. Thats gamechanging because in the runup to the war when President Biden turned to us, what is the risk of russian blowback, russian Cyber Attacks in response to significant sanctions he was working with european asian allies to put in place, we were able to answer that sector that question for the pipeline sector because that was the first one under dhs Emergency Authority wheren regulations had been put in place. It is every piece of knowledge, intelligence and cybersecurity advice we have, have we shared that regularly at an ongoing both are key allies and partners . Well talk more about another initiatives underway. The driving question President Biden always asked because partnership is so much a part of what we do. And then private sector. The balance of power shifted to the private sector. Whether it spacex and star like the tremendous work American Companies have done to help ukraine have a place the endpoint protection, moving data to the cloud. The balance of power shifted to the sector. Differences. Our a key company reachedo out to e the evening of russias invasion of ukraine. And said we see some signs of destructive capabilities being deployed it. My first phone call went my second most connecting him with sthem. Private Sector PartnershipTechnology Innovation is so key. Those three questions are the way we reorganize ourselves and measure our progress on defendant Critical Infrastructure in the United States and are key allies. Quick to talk about some the Lessons Learned, thank you of that. Im interested inof terms of how you are thinking about putting into future policies. President biden talks about technology and cyber are core to politics. Pick the area of art Artificial Intelligence is in everyones mind. We know the combination of ai, advanced telecom, quantum sensors with the precision they bring in the advances that bring in terms of measurement will drive technology. Leap ahead breakthroughs in the next few years. I just returned from r brussels were in september, before checkw gpt was a household name, we signed an agreement with the European Union to focus on five areas of ai for societal goods together. I was going to drive the technical i will talk orbit with the five areas are. But to show they could do tech t together. We could put in place data protections. Authoritarian approaches to ai, to advance a chat. For certain areas the area of surveillance of significant perils the promise of emerging technologies and the peril. And our policy approaches to what to make sure we are advancing on the promise hence the agreement with the european europeanunions and those five a. Focus on the perils. Because as i talked about we are a nation of regulation and moral privacy that drives all of us. That is core to our competition and our faith. Im just for the group those five areas are extreme weather predictions. Ct agricultural optimization driven by the impact of extreme climate droughts, floods, how we ensure because of the Food Production we need. Optimization to the electricity grid were trying to bring in different kinds of energy. We are trying to derive to a world more individuals use electronic vehicles. Work can be dissolved, what kind that infrastructure is built to support. But such exciting advances between the u. S. And the eu in the area of vision, imaging, detection, and family emergency management. Respond more effectively to emergencies. Certainly the role of satellites and helping us have the imagery to to respond to emergencies on how we do it more effectively and efficiently working on those projects in the key areas. Those guide our policy approachesng maryland while pressing forward on the progress. Folks thank you for thinking back to talk about the process made criticalg infrastructure. Her 10 plus years would make more progress in last three years in the last 10. It is really remarkable. From the Critical Infrastructure sector this is in terms of what the perspective is next steps in continuing to increase the partnership for Critical Infrastructure. Quicks is a good questions. Lets underpin the significant progress as you say. Because i agree. Those are more progress last three years the last 15 has been the shift from a voluntary model to add to that because we recognize, we mentored early when President Biden answer the questions on the run up to the war in ukraine what is the risk of blowback . As good as Publicprivate Partnership can be its very different when one shares threat information. When one shares a vulnerability with a Pipeline Company with the regulator can say what is your plan . The company to that. Now of course a part of that is the partnership. We should be sharing threat information actively. We also need to have our regulators have the ability to be at thehe table. First thing of the sector well. Second that gives us the confidence because Critical Infrastructure in the zero failed mission for Critical Infrastructure in this country is a zero dale mission its zero fail in every country site traveler in the world and talk to policymakers we are all grappling without the vulnerable truck Critical Infrastructure that you rightly pointed on the fact we owe our citizens the confidence they will have clean water. That they will have a power they will able to get gas to go to work in a Pipeline System will not be down for five days of pretty basic criminal attack. That is the biggest fundamental shift. Its really fantastic information sharing the intelligence committees during the joint cyber advisories, the fbi, the Intelligence Community what are foreign partners are doing a shot to the team did the recent one chinese attacked attacksCritical Infrastructure. Lays out actionable mitigation to help Companies Work together. And really finally the work we are doing with the private sector to drive more secure products. The white house launched cyber last month. The goal was to bring together and bridging three communities. Consumers tell us that more secure tech, more home schools and businesses but Companies Say okay will build more secure. But how do we differentiate ourselves to people shopping . We use our integrity. People trusted energy star the government stand behind that. In standards and in the certification. That lot shout out to the chairwoman of the scc whose team did the hard work. The tradeoff it quickly registers the cyber trustmark. Miss the standard following up on the executive order two years ago. The marked products with the cyber trustmark. Look out for that. Some of myf discussions in brussels we mutuallye recognized your u. S. Products. The department of energy is working on the standard for smart. This is working on smart the vision is to expand the number of products to have a cyber trustmark. I will run a Consumer Information campaign. This shows you working across the cyber approach. The scc running the program under their authorities with theirei funding. This is Consumer Education for the department of Energy Building standards for things like smart and fundamentally for companies play a role both in raising the product cybersecurity to meet the new Standards Companies like best buy and amazon we are thrilled to be a a partner to help consumers to buy safer tech. Thats a final piece of that. What this convenes a lot of different Product Companies i will tell you one of the themes i have heard is by design. The industries listening to the guidance we thank you for that. One of the other Lessons Learned was about foreign partnerships. It certainly played allied partners played a key role in russia, ukraine as we shift to more focus on specific supported update your perspective how the government is thinking about continuing to strengthen these partnerships. And the role of the coalition there . Whats its a great questiones President Biden talks about partnerships a key part of everything we do in a geopolitical world. We cannot operate alone. The more countries we are operated with together the more we can be a force for positive progress in the world. I will talk about three examples of approaches that we have been working on. The present coaster rico to the white house last week. Costa rica have been a cohost. On the prospective coder costa rica called out the first oneasn latin america to call out russias invasion of ukraine. I think he is the word criminal. They face significant Cyber Attacksni thereafter. A shout out to the fbi and the ambassador to the u. S. Ambassador to coaster it since he is a terrific woman. Her father was in a basilar to talk about a family legacy. Fbi had a team on the ground the next day. To ensure we can help costa rica rapidly recover. Ordered medical Services Online were all destructive. Im then the state department worked closely to put together 25 millionn grant to help fundamentally course to rica filled out the cyber resilience. Its already working on the ground apart that is money going to south, to build a Security Operation Center both for the country and for their military. And then finally, recognizing that the nations infrastructure of the telecommunications is the foundation of security. We did the first ever financing grant of 300 million to help costa rica moved off a ig infrastructure to trusted infrastructure pretty get a shout out for rita joe for her work given the first ever financing grant for 5g infrastructure in costa rica. So that is what example. The focus to ensure that when a key partner has a major cyber attack we can help put the resources on the ground to help them recover quickly. Two of them build the resilience and fundamentally to ensure the telecommunication infrastructure which is the foundation of the country is secure. The second model of International Partnerships or International Counter rents over initiatives which will be convening october 31 and d. C. The number of members have grown from 31 to 47. Global partnerships to fight cybercrime. Everyone is done with disruptions of cyber crimes disrupting hospitals, disrupting schools, companies are facing that its a major issue and a problem that you have attackers in one country largely based in russia. There are often beyond the reach of Law Enforcement infrastructure around thehe wor. Convening the Global Partnership with the United States did designed it, built it has grown it as a key part of our work. We are working the first ever statement on a coordinated approach to ransom payments, what our policy will be that we have major take away 47 major countries in that area. Any final example of our partnerships is the virtual cyber Incident Response team. Youre faced with significant risk of rush attacks. There have been a number of them. We wanted to interrupt that was one all members of nato could quickly in a coordinated way respond. International partnerships is a major part of the work we are doing. At that major part they send different kinds of partnerships some very large multilateral some smaller. Quite a lot of industry in this room. Nd and across United StatesIndustrial Base has built capability of cybersecurity support the commercial industry the u. S. F government. Thats a great question underpins all of our foreign partnerships. We do a 25 milliondollar grant to costa rica as for cyprus attacked her cybersecurity support and protection. A lack of responsee capability. Certainly the fact the u. S. Is why the nations and cybersecurity is what underpins our ability to project our vision of cyberspace secure open and interoperable cyberspace. That worker, the information sharing frankly between companies. The power of connecting the Network Internet routers with detection at each endpoint in the sharing that happens across our private sector is a force for good. Driving work that is a piece and then finally as i mentioned a mission secured by design a major effort so i can tell if it is secured isby design and products to tha. Lets have a vision together that for the United States by the end of 2025 every iot products, every router and this country has a cyber mark label. Consumers are buying more secure tech. Otherwise ill put it in a more positive way with that approach we can Work Together to enable a more secure cyberspace. The glass is halffull but. As halffull peacocks always at the only way in this business everyone knows that you knowlf that youve been in the business a long time. What you talked about ai. Every conference has a theme. Here this week a lot of conversation around Artificial Intelligence. A lot about the opportunity it also presents risks. Ambassador last night talked about speed is based upon trust. Im interested in your perspective around the opportunities and risks and how we move to the trust model there . Absolutely. The white house approached because it tests every part of our society the impact on jobs the impacts on industrial manufacturing and the impact on equity. We went to make it a more equitable world because of ai. Ai models are trained on the dated we have they may not be how do we make it see a force for greater equities the National Treaty impact mass of the Biggest Issue we struggle with and the Intelligence Community is how to make sense of all the data we collect and how to enable i have now become an Intelligence Consumer with thousands and thousands of intelligence reports. Today if an Intelligence Consumer im sitting at my desk want to know everything Intelligence Communityt knows about a particular advances given adversaries making in space Cyber Attacks one has to read all of the reports to do so. The ability of check gpt to summarize the most significant t information most recent information is incredibly powerful to make sense of the wealth of intelligence we produce we have produced and we produce today so massive that promise. The area of Cyber Defense we announce the challenge to open it up and say we need to advance ai for defense over ai for offense. Ro really massive promise in this space as you note the approach the u. S. Has been taking for the voluntary commitments from companies because companies aree the first the space of resilience and defense how they build models, how they protect their ai models how they they that they are trained on and the tests have been done. The second piece is an executive order that work is underway for late fall finally work on the hill which is the regulatory approach to address some of those risks but we want to make sure the promise and peril that ai brings we really focus on the promise one peril as we are so focused that we do not make progress in the promise space. When i think about what would be to your point the kind of a promise in this space i talked earlier about whether to keep people safer what if we were able to predict the fires in omalley and drive much more rapidha Emergency Response and evacuation. I grew up with a cousin who was blind out often take her for walks on saturday afternoons. It was tremendously humbling i was a sighted person to walk with her. Because my brain automatically adjusted to the uneven road i did not see it until she would stumble next to me and then i started looking for it. When she commented to mear you know the indent in the road for carriages, gas makes it easy if you know questions is no thats how i stumbled to the gutter where the cars are. So you think about she walked with a stick she needed my quiet voice which from independence perspective was very hard. Pe we think about what ai can do for folks with disabilities thats an earpiece and connecting to satellites to find the route with least traffic to identify when theres uneven parts a fast moving vehicle a deaf person will not necessarily hear theres tremendous promise and that vision for folks who lose their vision at the end of their lives and as a society we want to make sure we make that progress. Even as we keep an eye on the perils or t significant perils particularly we think about authoritarian models which are not covered by privacy arprotections the way we are. And can use for example extensive advances in Computer Vision to capture all that data from cameras to surveilled tcitizens, movements and communication. Last question. We are here the government and industry together talking at some of the nations most challenging cybersecurity problems and opportunities the glass is halffull. I would love to your closing thoughts on a path Forward Together . As you said it can only be done together. The innovation coming out of cybersecurity industry at the u. S. And around the world is the underpinning of national defense. Critical infrastructure is it zero emission. The door is open for innovative policy idea as you said the administration has done a great deal of shout out to the entire team cyber across the u. S. Government and our partners around the world. To drive it more and rapid information sharing to set regulations so that Companies Know they must have the basic digitall locks on their doors ad windows and the digital alarm system the endpoint detection to detect threats. The way we have a shared commitment that the americans and individuals around the world can feel they are safe in cyberspace could only come from the partnership together. A really positive example was a recent backtoschool safety events. What we are seeing in schools where criminals are attacking schools and leaking sensitive kids data online is unacceptable. Multiple companies stepped up with the some of the first lady did at the white house. As shout out for example which is providing Free Services to school with less than 2500 kids. If i recall correctly the entire state of arkansas is moving all of their schools within the under 2500 kids if i recall correctly the number 28 states are already in talks on that amazon Free Services and that way as well. Obviously it does work the u. S. Is doing the department of education setting up a coordinate of counsel to bring schools together for guidance with School Superintendents require more secure tech. We will have teams on the ground in multiple states helping schools. That is an example of what we each do what we do best that we do it together in partnership with the measure to say every kid in america when they go to school a joint measure of our goal together and the individual work is what is so inspiring. And its what we inspire we see everyone here together at a conference its exciting to bebe here as well pay. Thank you. Thank you for the conversation today but thank you for your service. Thank you for being on the frontlines of our nation bringing us together this important fight its an honor to be happy with you today. Thank you to the audience for engaging with us as well so thank you. So good to be here with you. [applause] a healthy democracy does not just look like this. It looks like this. Americans can seat democracy at work. Citizens are truly informed were a republic thrives. Get informed straight from the source on sees bit unfiltered, unbiased, word for word from the nations capitol to where ever you are because the opinion that matters the most is your