Subcommittee hearing examines DHS cybersecurity priorities

At a recent hearing of the House Homeland Security Committee’s Cybersecurity and Infrastructure Subcommittee, members examined how the National Protection and Programs Directorate (NPPD) is carrying out the U.S. Department of Homeland Security’s (DHS) national cybersecurity mission.

Throughout the meeting, members heard testimony from a number from top NPPD officials, each of whom reaffirmed the directorate’s commitment to securing federal networks, identifying systemic risks in critical infrastructure, and mitigating the effects of future attacks, and incentivizing enhanced cyber and physical security practices.

“We have to get this right because new technologies – the internet of things, driverless cars, artificial intelligence, and quantum computing – are rapidly evolving,” Subcommittee Chair U.S. Rep. John Ratcliffe (R-TX) said. “We need to be securing at the speed of innovation – not of bureaucracy. Because we are in an era that requires flexibility, resiliency, and discipline, and I hope I will hear those values operationalized in the forthcoming testimony.”

NPPD officials used their testimony to highlight the agency’s response to recent global cybersecurity attacks, such as the WannaCry and NotPetya ransomware incidents.

The hearing also included talks on the Cybersecurity and Infrastructure Security Agency Act of 2017, which would effectively rename and reorganize the NPPD. While the legislation was recently passed by the House Homeland Security Committee, it has yet to receive full consideration by the House itself.

“If enacted, this bill would mature and streamline NPPD, and rename our organization to clearly reflect our essential mission and our role in securing cyberspace,” DHS official Christopher Krebs said. “The department strongly supports this much-needed effort and encourages swift action by the full House and the Senate.”

Jeanette Manfra, assistant secretary in DHS’ Office of Cybersecurity and Communications, agreed with Krebs’ conclusions, adding that a name for their organization that reflects its mission was essential to its workforce recruitment efforts and effective stakeholder engagement.