Cspan. Org. We must deny entry to terrorists, drug traffickers, human traffickers, Transnational Criminal Organizations and other threats to National Security and Public Safety while, and i emphasize this, continuing to facilitate legal trade and travel. In this regard, i, too, congratulate our Law Enforcement and National Security partners and the government of mexico for the capture and arrest this weekend f guzman on february 22nd. D. H. S. Must continue efforts to address the growing cyberthreat to the private sector in the dotgov networks shown by the ongoing series of attacks on public and private infrastructure. Many in con depress have expressed a willingness to help in cybersecurity. We appreciate that. Have studied h. R. 3696 out of this committee. We think bill is a good step forward. We want to continue working with congress on this and other legislation to improve this and the nations overall cybersecurity posture. We must continue be vigilant in prepping for and respondin
Gentlewoman from florida, ms. Minutes. So, i want to thank all of you at American Enterprise institute for the great work that you do when the opportunity to be with you today. As mckenzie said, secretary haeckel recently announced a number of recommendations and proposals that will be contained in the Defense Department fiscal year 2015 badges admission. It goes about pain that make in spending choices as having more losers than winners due to the fact that budgets are tight and could get even tighter is no way to win a popularity contest. In many respects, there is something in the package to set up just about everybodys alarm bells and on which meter. From my perspective and as i hope my remarks will make clear, the two categories of stakeholders most protected from these changes are people we should all feel the most accountable to. The average American Fighting man woman in the average american taxpayer. To best take advantage of our time today as well as this informed audience, i
Excellence. So be that role model always. Which is very closely related to Lesson Learned number seven, ethics. The importance of ethics. And by the way, one of the things that has kept me very busy this the last three months in the last three months was a major failure of integrity, our core value number one. It occurred in our missile community, the icbm community, and ill just take a minute now to talk about this. It gets down to ethics. And this was a cheating situation that occurred. And by the way, it grew out of a drug investigation. And cell phones were confiscated as part of this drug investigation, and in the forensic analysis of the cell phones, it was discovered that those who are in the mess Sill Community and missile in community and are in charge of our icbm Nuclear Weapons had cheated on a proficiency test which i think i was two or three weeks on the job when this came to the light, came to our attention at the senior levels. And the first thing i asked was, holy cow,
The estimated cost have reasonable defenses, and protection of sensitive information. From a few Million Dollars to as high as 50 million. These figures from other studies get saved. Approximately 100 for every identity stolen. We have 310,000 stolen. Is 310,000 times 100. The question i think mr. Maldon raised, an excellent question, whose shares in the responsibility for protection . It will bankrupt most universities to spend 2030,000,000 dollars when there is no guarantee any way. It is something that should be shared worldwide laying worldwide. Take one example. Social security numbers. Socialt we do you value security numbers . Why not require Financial Institutions not to use Social Security numbers . So there is no incentive to steal them . If one doesnt do that, one shifts the costs to Higher Education institutions. It is a balancing between risks and costs. All i can tell you is that the cost can be staggering. Even then, all of the experts we have retained are telling us the
A were missed by management. Maybe because of lack of a sense of confidence, complacence. Theautomated warnings of signals that should have an indication not only of intrusion but the need for action were missed. Cost. As created enormous better management has to come with better technology. Take it by your silence you are agreeing. The other area that has not been too star far is the notification. Breach occurring on 1112, november 12, happened well notification to consumers. Was in a lot of timelyrs, was there enough notification here . What can be done to improve that in the future . Ms. Mulligan first. And press the others by what you think about the timing and the notification. First, we identified malware honor system on this ar15. Should you have discovered it earlier . That is a reasonable question. It is asking a lot of hard questions. Simply thatst state there should have been earlier discoveries. Whether you could have prevented the intrusion and stopped it a subjecthat may