[Congressional Record: June 16, 2010 (Extensions)]
[Page E1123]
PROTECTING CYBERSPACE AS A NATIONAL ASSET ACT OF 2010
______
HON. JANE HARMAN
of california
in the house of representatives
Wednesday, June 16, 2010
Ms. HARMAN. Madam Speaker, the stark image on millions of television
screens around the world is of a broken pipe one mile underwater,
spewing tens of thousands of gallons of oil into the ocean each day.
This deadly and disturbing horror could be replicated should we have
a major cyber attack--broken networks spewing tens of thousands of
terabytes of information about critical infrastructure, national
security, mission-critical data and personal financial records.
Indeed, damage caused by the worst environmental disaster in U.S.
history could pale in comparison to the chaos that could ensue after a
major cyber attack.
So today, Madam Speaker, I am pleased to introduce with Rep. Peter
King the companion bill to S. 3480, The Protecting Cyberspace as a
National Asset Act of 2010. Authored by Senators Lieberman, Collins and
Carper, S. 3480 was the subject of a legislative hearing yesterday in
the Senate, and is moving there on a fast track.
In the words of former Assistant Secretary of Homeland Security for
Policy Stewart Baker, ``we are going to have a meltdown'' if we fail to
act to protect our cyber networks.
Right now we are chasing the problem. We need to get ahead of it. As
described in the report released today by the Government Accountability
Office--we face daunting challenges in tackling this problem,
including: a lack of sustained leadership, insufficient resources,
authority to enforce actions in the event of an imminent cyber attack,
the need to partner with other federal agencies and private sector
entities and insufficient education and training.
All of which this bill aims to correct.
First, the bill would establish a coordinating mechanism at the White
House--an Office of Cyberspace Policy--to develop a national strategy
for securing and improving the resiliency of cyberspace.
Second, it would create a National Center for Cybersecurity and
Communications at the Department of Homeland Security to identify and
mitigate cyber vulnerabilities. The Center would be charged with
providing situational awareness, conducting risk-based assessments of
threats, identifying vulnerabilities, managing external access points
for federal networks, overseeing operations of US-CERT, and working
with the private sector to establish security requirements to
strengthen vital components of critical infrastructure like the
electric grid and telecommunications networks.
Third, the key section of the bill provides the President with
authority--in consultation with Congress--to impose emergency security
measures on critical infrastructure networks in the event of a
catastrophic cyber attack. Presently, this authority is ad hoc.
Fourth, this legislation requires development of a supply chain risk
management strategy to address risks and threats to information
technology products and services upon which the federal government
relies.
Finally, the bill requires the new Department of Homeland Security
Cybersecurity Office to consult with the Privacy & Civil Liberties
Oversight Board mandated in the 2004 Intelligence Reform & Terrorism
Prevention Act. Sadly, this Administration has yet to nominate
individuals to serve on the Board. Additionally, the Director of the
National Center for Cybersecurity and Communications is required to
designate a privacy officer to review activities of the Center and
conduct privacy impact assessments to ensure information is being
collected in a manner that protects privacy and civil liberties of U.S.
persons.
With strong leadership to implement it, this bill will plug the
gaping hole in our cyberdefenses--while we have the chance to do so--
and, hopefully, prevent another potential devastating disaster.
I urge its prompt enactment.
____________________