WEBVTT 00:02.620 --> 00:07.810 So. Quote is a committee of the host of services that in order. 00:08.410 --> 00:09.770 I'm pleased to welcome everyone. 00:10.340 --> 00:15.600 For this hearing and just be a 2017 budget requests for information 00:15.600 --> 00:17.960 technology in several programs. 00:18.490 --> 00:21.940 La la this secretary has been highlighting the need for increased 00:22.300 --> 00:27.050 innovation and apartment that tends to public private partnership 00:27.050 --> 00:31.320 search grateful that it's a Terry aeshin closer than yesterday 00:31.320 --> 00:33.120 on this issue so to an all time. 00:33.740 --> 00:36.860 As well as important generated in the ability. So olive said. 00:38.330 --> 00:42.750 Owing advantages of future. Potential adversaries of allay that 00:42.750 --> 00:44.660 information technology in siren. 00:45.200 --> 00:49.530 Low post served as key enablers and at the same time% keech 00:49.530 --> 00:52.940 own does that apartment as it tries to realize its mission. 00:53.620 --> 00:57.640 And this time of the storm constrain ios. Avoid is a clamp or 00:57.640 --> 01:01.380 in turn forced management redder to make sure that we are squeezing 01:01.380 --> 01:05.250 the most out of every defense star where it makes sense we need 01:05.250 --> 01:09.570 to learn from and a straight man news the kinds of business and 01:09.690 --> 01:13.340 lennox and business intelligence methods that works. So well 01:13.690 --> 01:14.980 and they commercials fear. 01:15.560 --> 01:18.830 That awesome main choosing commercial tools to the maximum extent 01:19.240 --> 01:22.660 especially in areas like business systems and cloud computing. 01:23.280 --> 01:27.470 We need to find better ways to foster and maintain our own human 01:27.470 --> 01:31.270 capital to support the acquisition and management and information 01:31.270 --> 01:36.220 technology and cyber systems and looking to this most recent 01:36.220 --> 01:40.180 was a request a one to make sure that apart ms emphasizing these 01:40.180 --> 01:44.860 two copper mary tracts increase innovation as well as increase 01:44.860 --> 01:45.830 management this split. 01:46.490 --> 01:49.220 I would like to. Welcome mother's sandwich panel of witnesses 01:49.250 --> 01:53.300 and appreciate their perspectives on all of these issues this 01:53.300 --> 01:55.930 peddling close see arnold Terry of are sent. 01:56.450 --> 02:00.300 Eighth information officer department of defense they are will 02:00.420 --> 02:04.770 cater la vein day deputy chief management of search the form 02:04.770 --> 02:08.400 of defense a light known to turn to my friend and ranking miller 02:08.400 --> 02:11.680 missed a jam lands of in from rhode island a commence you'd like 02:11.680 --> 02:12.180 to make. 02:13.100 --> 02:15.640 I do miss channing. Thank you that can be in this hearing and 02:15.640 --> 02:18.800 I wanna thank you go. Witnesses testifying today at a presence 02:18.800 --> 02:22.810 fiscal year 2017 budget request for make information technology 02:22.810 --> 02:23.880 inside the programs. 02:24.440 --> 02:27.690 Us weekly heard about cyber mission forced build an operations 02:27.690 --> 02:31.280 for map or Rogers in today. We'll hear about the infrastructure 02:31.280 --> 02:34.490 out will fighters operate within and defend the enterprise. 02:35.100 --> 02:38.710 Side or commands the the kid flick the ability to see the network 02:38.870 --> 02:42.450 a in order to provide better defense the drawing information 02:42.450 --> 02:46.530 and I am and a J IE. I is getting in is the diving efforts for 02:46.530 --> 02:49.680 achieving this capability in today. I hope to hear about the 02:49.680 --> 02:53.060 progress made under the jay IE umbrella governments for this 02:53.060 --> 02:55.230 effort and service contribution HP's. 02:55.830 --> 02:59.160 About a major undertaking I'd like to discuss today is implemented 02:59.160 --> 03:00.790 bombs cloud strategy. 03:01.360 --> 03:05.570 The dod's migration to the cloud is slowed due to laborious a 03:06.000 --> 03:09.840 as certification Kwai men's in acquisition system unable to keep 03:09.840 --> 03:12.070 up with that with cloud services procurement. 03:12.630 --> 03:15.920 This also seems to can dared any efficiency or cost savings that 03:15.920 --> 03:17.160 the the wise speech she. 03:17.900 --> 03:21.310 Finally the dod has been tasked with building and maintaining 03:21.310 --> 03:25.970 the I keep system pro pianist new dash a background investigation beer. 03:26.680 --> 03:30.200 Well it makes sense the dod. It makes sense the department provide. 03:30.710 --> 03:34.680 Expertise and building a secure system of concern the deo Dee 03:34.680 --> 03:38.330 is assuming all the rest by providing resources and assuming 03:38.330 --> 03:41.390 responsibility for decisions made outside the department. 03:42.600 --> 03:46.300 As that's a lot can advocate this obscurity within this Subcommittee 03:46.610 --> 03:50.800 of gladly taken the time not only discuss the building operations 03:51.060 --> 03:55.280 but also and the infrastructure iran cyber warriors operate within 03:55.280 --> 03:59.700 everyday over the last few weeks again the thank you miss chairman analysts. 03:59.700 --> 04:03.110 Thank you eye witnesses of the big it today to discuss is important 04:03.110 --> 04:05.350 topic and I yo back to bounce of my time. 04:06.500 --> 04:10.550 Like he's a legend and now the welcome again to witnesses by 04:10.550 --> 04:14.070 your widnes save men's a will be submitted to the record solely 04:14.070 --> 04:17.340 acid to summarize your comments and five minutes a lesson than 04:17.680 --> 04:22.070 that to that uh each of a person's on the Subcommittee will on 04:22.070 --> 04:26.140 goes to a five minute process. Send awning kevin gates will may 04:26.140 --> 04:30.430 shares son a crack like so we know began with the set elder son. 04:32.770 --> 04:37.350 A To jay went ranking member and distinguished members is submit BT. 04:38.090 --> 04:41.270 Like you face opportunity testified flow Subcommittee today on 04:41.270 --> 04:43.830 the Department's information technology budget request. 04:44.730 --> 04:47.960 Is of far can see IO I and the principal advisor to the secretary 04:47.960 --> 04:52.620 defend for information management. I T cyber security communications 04:52.650 --> 04:56.710 positioning navigation timing specter management senior leadership 04:57.080 --> 04:59.660 nuclear command control communications matters. 05:00.830 --> 05:03.770 Those are the responsibilities are clearly unique to the guy. 05:03.770 --> 05:04.130 I D. 05:05.220 --> 05:08.190 My imperative the cno in managing this fraud and diverse. 05:08.190 --> 05:11.820 So the fox's insulin. Sure that the department has the information 05:11.850 --> 05:15.100 and communications technology capabilities needed to support 05:15.170 --> 05:17.090 a broad set of the Parker missions. 05:17.900 --> 05:21.560 Includes supporting are deployed forces and cyber mission forces 05:21.590 --> 05:24.380 as well was business and we're fighting support functions. 05:25.370 --> 05:29.080 Secretary carter has stated dod must address strategic challenges 05:29.080 --> 05:33.200 across all domains not just air land and sea but increasingly 05:33.230 --> 05:34.270 in cyberspace. 05:35.290 --> 05:38.290 The Department's budget includes funding to address these challenges 05:38.320 --> 05:42.220 including I teen cyber investments that are critical to the Department's 05:42.220 --> 05:44.590 war fighting intelligence and business missions. 05:45.540 --> 05:49.180 As a cno I'm driving cultural business technical improvements 05:49.210 --> 05:54.050 and innovation in to dod's I see in cyber to better support defense 05:54.050 --> 05:55.320 missions and operations. 05:56.270 --> 05:59.530 My written testimony provides 40 killed information on it departments. 05:59.560 --> 06:02.090 I T in cyberspace budget and prior it's. 06:02.950 --> 06:06.190 And what emphasize city's efforts require teamwork in partnership 06:06.220 --> 06:10.220 with the aim dod which includes this up you westy age. You know 06:10.260 --> 06:13.680 policy us cyber calm. The cno and other partners. 06:14.950 --> 06:18.200 Startled partnerships to dod will also be critical to include 06:18.200 --> 06:20.810 congress industry and our allies. 06:21.950 --> 06:25.070 I strongly believe in expanded partnership with industry will 06:25.070 --> 06:28.260 be essential to expanding in maintaining textbook logical. 06:28.260 --> 06:31.230 It fades twos. While improving our fiscal accountability. 06:32.030 --> 06:35.090 Like thank you for your enter stents fork and I look for to your questions. 06:36.410 --> 06:39.340 Thank you miss said Belkacem when out precede to missile of. Aim. 06:42.610 --> 06:45.420 Uh thank you chairman Wilson not right the reverend jim members 06:45.420 --> 06:48.550 of a separate I'm I'm peter Levine and um the death the chief 06:48.550 --> 06:52.420 mansion officer that are for defense two years ago de this committee 06:52.420 --> 06:55.770 enacted legislation a which will a merger the offices of the 06:55.770 --> 06:59.470 the CMO in sea area how over the legislation does not take affect 06:59.470 --> 07:02.320 until the beginning of next administration. So until that time 07:02.740 --> 07:07.150 of the sea. I yo mr. Halverson will remain of the the these the 07:07.150 --> 07:10.720 response will official with nlsc for I T cyber security another 07:10.750 --> 07:13.170 it and and and many the other issues addressed in your letter 07:13.170 --> 07:13.800 of invitation. 07:14.420 --> 07:17.540 The DC I'm most role until such time is this this merger takes 07:17.540 --> 07:21.850 place is limited to reviewing and approving of investments in 07:21.880 --> 07:24.170 I teen Bisset systems um. 07:25.410 --> 07:28.660 We do that we do sank in that regard for the for last year's 07:28.660 --> 07:31.990 ndaa in which oup new smses substantially spam wine and give 07:31.990 --> 07:35.100 us more flexibility the way. We do tests of we intend to use 07:35.100 --> 07:39.250 this new flexibility in several ways. First uh we intend to a 07:39.250 --> 07:43.400 change our focus from be a discreet reviewing each individual 07:43.400 --> 07:46.350 small investment focus more on portfolios. So we can be more 07:46.350 --> 07:49.170 forward looking and arm in arm management of this assistance 07:49.650 --> 07:52.890 ass second we plan to focus much more on return on investment. 07:52.940 --> 07:55.750 So we can and sure that one we invest in does assistance we've 07:55.800 --> 07:58.190 actually realize the benefits. So we should be able to get out 07:58.190 --> 08:02.220 of um we actually turn off the legacy systems and reduce man 08:02.220 --> 08:05.760 and where we can do about develop more a more efficient unless 08:05.760 --> 08:09.600 manpower intensive process seeds and finally I we're gonna work 08:09.630 --> 08:13.000 to develop a streamlined process forbids a systems out where 08:13.000 --> 08:16.580 we were we can all lion Arab is a systems investment process. 08:16.800 --> 08:20.340 Rc audio process of acquisition process into a single into a 08:20.340 --> 08:22.840 single process. So we don't have to see quench we go through 08:22.840 --> 08:26.170 one after the other an answer and then quit the program manager 08:26.170 --> 08:29.760 through the recurrent says would go forward um work from the 08:29.760 --> 08:33.140 committed to working with with you a as we try to make the out 08:33.140 --> 08:36.800 the Biz a systems up process more efficient and to approve did 08:36.830 --> 08:39.710 the Department's investment process. And look forward to your 08:39.710 --> 08:40.760 questions like mischief. 08:41.900 --> 08:44.110 Thank you very much a Mono of a seed. 08:44.640 --> 08:49.330 Of whipped up by men around a own a command a lynsey kavanagh 08:49.330 --> 08:50.910 and zoom lens of and tore. 08:51.450 --> 08:56.480 A Achieve a stronger internet today. So uh congratulations you 08:56.480 --> 08:56.990 take a. 08:57.590 --> 09:01.620 On and a McGill applied self of this is from votes are you. 09:02.180 --> 09:05.660 Uh what do you see is a major budgetary challenges in this year's 09:06.070 --> 09:10.360 a presence budget request art where are we accepting risk based 09:10.360 --> 09:12.510 on a common budget. Constraints. 09:13.880 --> 09:17.300 A lot of a given general answer we choose not enough money and 09:17.300 --> 09:20.360 all deferred a mr. Avarice in this city. I T budgets. Specifically. 09:22.200 --> 09:25.400 I certainly Gecko critters. First comment about not enough money. 09:26.050 --> 09:29.500 Balm I think in the eye cheery it. We're we're taking some brisk 09:29.530 --> 09:33.870 in in modernisation Wall some of that will slow all we're trying 09:33.870 --> 09:36.960 to balance said make sure that we don't take that risk in the 09:36.960 --> 09:37.830 security side. 09:39.140 --> 09:41.970 Um the other I think challenge that we're going to have and I 09:41.970 --> 09:44.880 keep may not be exactly in the budget and it's going to be the 09:44.880 --> 09:49.050 retention of the I T workforce olive and for the that's gonna 09:49.050 --> 09:51.770 beat comedown what economic see sheen I happened to be in the 09:51.770 --> 09:53.170 valley will last week. 09:54.090 --> 09:58.750 And you know golan Alps they're raising dup pay for cyber security 09:58.750 --> 10:03.200 by another 20% that's going to keep impacting our ability were 10:03.200 --> 10:06.310 track tele. She 's me but but what keeps me up award like that's 10:06.310 --> 10:07.380 probably the it's. Sir. 10:10.500 --> 10:14.100 And thank you very much and mr. Elder son chairman Mac dorm berries. 10:14.100 --> 10:18.360 Most recent defense reform proposal emphasizes boto typing age 10:18.360 --> 10:21.920 for men to shut. And you tell us what that apart was to Indigo 10:22.070 --> 10:26.280 transmit techno luncheons. I re probe un's. But how I it these. Approaches. 10:28.930 --> 10:29.570 It's like you. 10:30.240 --> 10:32.370 It's a tough couple saying no stick with it. We wanna. 10:33.230 --> 10:34.210 Answer this question. 10:35.150 --> 10:38.740 Mo what's all the innovation today being driven in the site ever 10:38.740 --> 10:41.590 tonight the business is coming from the commercial sector. 10:42.350 --> 10:45.830 We want to be closer caught it to the official sector. So thanks 10:45.830 --> 10:47.600 to so legislation last year. 10:48.190 --> 10:52.520 I am able canal put people from the eau de ins died all this 10:52.610 --> 10:57.110 is so we're tooling that today and also have bases Apple omar 10:57.230 --> 10:59.580 stay which we are also doing a day. 11:00.140 --> 11:03.610 Um I think that partnership that we continue distracted is a 11:03.610 --> 11:07.100 key to ought scared into bright innovation getting all to line. 11:08.370 --> 11:09.880 With into the deo tea. 11:10.400 --> 11:12.530 One of focus are some two dollars. 11:13.310 --> 11:16.240 Rounded eerie seems to ink on a focus form and that's gonna be 11:16.240 --> 11:20.610 on but weapon systems and copped level security systems were 11:20.610 --> 11:23.930 there is not the eight um what's playing the commercial sector 11:23.930 --> 11:26.730 and I stick our budget re Flex that that's for emphasis see is 11:26.970 --> 11:31.810 and also like where we're taking a risk is around innovation dollars. 11:31.980 --> 11:36.870 It would have the war inside the budget for a um commercial area 11:36.990 --> 11:40.070 is to we've taken some risk in and I not spending that much. 11:40.910 --> 11:44.400 Then in the press with the approach. But said troy carter too. 11:45.130 --> 11:50.310 Of them were from other private I'm cooperation a addition mischievous 11:50.310 --> 11:53.910 and then that fy 17 budget requests to the fenced information 11:53.910 --> 11:57.670 systems a and say the primary I to provider for their parma. 11:57.670 --> 11:59.500 No I I hit the essence a funding. 12:00.010 --> 12:04.580 It has to pursue innovation and 10 illegitimate stressed and 12:05.090 --> 12:08.710 Please explain the rationale for that decision and how this alliance 12:08.710 --> 12:11.640 with this sectors in a says on grouping it and and of a spin 12:11.910 --> 12:13.170 from the commercial sector. 12:14.540 --> 12:19.190 Which reduced matisses Suu Kyi on a and it still has some warranty 12:19.190 --> 12:22.930 moni but in the area. We reduce it is a lined. Exactly. I think 12:22.930 --> 12:24.750 what we sit for today. 12:25.770 --> 12:28.800 We're we're going to it are information prick kicked for most 12:28.800 --> 12:31.970 of its says activities which are supporting our be this fall 12:31.970 --> 12:35.140 to is trawl industry and close soul. 12:35.680 --> 12:37.350 In et constraint budget. 12:37.880 --> 12:41.470 Mm. That way right we chose to take some risk because I think 12:41.470 --> 12:45.800 I can get that's aim innovation and Awful set by scraping our 12:45.800 --> 12:47.500 relationships with commercial. Industry. 12:50.640 --> 12:55.310 Addiction lying to them of mr. Out person a section on a one 12:55.340 --> 13:01.110 of they fy 2015 in da man. David that the chief information officer 13:01.110 --> 13:05.040 began to exercise that started to russian and control over the 13:05.040 --> 13:08.700 information assurances to rack trade of a national security agency 13:09.040 --> 13:11.980 whistle a this Subcommittee was right aware of a DIA de proposal 13:11.980 --> 13:15.410 to play setup tardy direction in control back with the under 13:15.410 --> 13:19.520 said tray for intelligence do support. They depart was proposal 13:19.680 --> 13:22.470 where the pros and cons of keeping editor already with the chief 13:22.470 --> 13:23.410 information officer. 13:25.030 --> 13:28.480 Can dull milled it that the pope has made a formal proposal yet. 13:28.480 --> 13:30.430 I think I know they is being discussed. 13:30.960 --> 13:34.090 I'm a cannoli I would have song for them. 13:34.850 --> 13:38.010 Consists or it's about moving away from that the eau de said 13:38.010 --> 13:39.880 all but one port we will we are to wean. 13:40.730 --> 13:44.060 He's working with seat intel's for the part meant to form a golfer 13:44.060 --> 13:48.040 nick structure that will allow bowl saucy. I elf and until at 13:48.080 --> 13:52.100 woody's in guy. I a BMW any to be a dress. Well what drew background. 13:52.100 --> 13:54.990 We would all appreciate uh any and put that any time. 13:55.500 --> 13:59.950 A as we uh consider this issues unknown to yield to missile engine. 14:00.670 --> 14:03.140 Thank ms chan. Again. I went they both the witnesses for being 14:03.170 --> 14:06.710 here which are doing in the eye key insiders a cashier um. 14:07.520 --> 14:10.920 So what the course a katie been and carried talk about a dad 14:10.920 --> 14:15.120 is to many go in terms of well you'd be a private sector increasing 14:15.120 --> 14:19.170 what they're paying a did this i've scary folks. It's gonna be 14:19.230 --> 14:22.370 ticking challenge enough for press to compete to get that top 14:22.370 --> 14:26.660 than talent. I know in the ndaa last year. We I gave more flexibility 14:26.660 --> 14:30.330 to department to try to take advantage of that I T talent the 14:30.330 --> 14:34.900 dough for example um allowing potentially get it. I vision it 14:34.900 --> 14:39.160 to see a private sector yoga detail for maybe a year or two at 14:39.350 --> 14:42.930 ease high-end individuals that you anyone with it would be challenge 14:42.930 --> 14:46.370 trusted that both the afford the tracking keep for block a time. 14:46.770 --> 14:49.600 But you know when that country that it can be seven interest 14:49.600 --> 14:54.190 in a chav duty wanna help uh it gets to the secured a nation 14:54.190 --> 14:57.870 cyberspace um to wait we made some progress now with the ndaa 14:57.870 --> 15:01.380 giving some flexibility to the apartment up key you tell me to 15:01.380 --> 15:05.430 be the dish authorities to further take advantage of that talent. 15:05.480 --> 15:09.880 So that we we are to have they the the the cyber workforce. 15:09.880 --> 15:13.230 It's as robust as possible on a network servers secure an as 15:13.230 --> 15:14.240 robust as possible. 15:14.930 --> 15:18.120 First I would thank you for the ndaa lester daddy. She'll predpol 15:18.120 --> 15:21.980 solo work are able to do the except it workforce and cyber um. 15:22.580 --> 15:25.270 Being able to bring the people of from industry like we're doing now. 15:25.300 --> 15:26.310 I do think. 15:27.040 --> 15:29.650 We will meet Saul legislation that that. 15:30.220 --> 15:33.590 Probably changes slightly the rule sets about what we're allowed 15:33.590 --> 15:37.140 to do with the industry people I think exactly what he stated 15:37.140 --> 15:39.650 we really want to build the the bring the main and have film 15:39.750 --> 15:44.140 sit in a position for a year being able to execute some decisions 15:44.140 --> 15:47.220 within the department and then go back to industry just like 15:47.250 --> 15:50.990 I said there's a market space today for Austin have some of our 15:50.990 --> 15:54.010 civilian employees Cody industry an industry would like to have 15:54.010 --> 15:57.650 them and I think will be that clipped some a legislation so that 15:57.650 --> 16:00.720 could happen moral front. I think we share the vision and yeah 16:00.720 --> 16:04.030 and we want more often in a now back and forth and you could 16:04.030 --> 16:08.140 really see the career pet in cyber. I teach changing sold. 16:08.140 --> 16:13.030 It's not on all civilian or or government pcr payout but a much 16:13.030 --> 16:15.500 more combine crickets and I think that would serve the nation. 16:15.500 --> 16:18.830 Well that deadly that's exactly. Right hope that we of bounded 16:19.160 --> 16:23.310 the that's who we want to get to of it please. I hope the work 16:23.310 --> 16:26.690 with the same in tell us how we can be of help in tears of additional 16:26.690 --> 16:29.170 legislation wang. We sit you need to get to that point. 16:30.180 --> 16:34.670 Um suicide mention in might opening state minute. I find it appropriate 16:34.670 --> 16:37.920 that are the defense is involved sit in building a new uh. 16:37.920 --> 16:41.770 I key system for all pianist new gash a background investigation 16:41.770 --> 16:45.370 bureau that tactile house sensitive personnel information. 16:45.820 --> 16:49.130 However I'm I'm concerned that dead that the beauty is been given 16:49.130 --> 16:53.110 guidance and deadlines to the not realistic and is assuming all 16:53.110 --> 16:56.870 responsibility for performance a with the decision making authority 16:56.950 --> 16:57.660 baby shared. 16:58.260 --> 17:01.800 So my questions are gotten good key described the department 17:01.860 --> 17:05.310 of defense is role in building and maintaining a new cat I'd. 17:05.340 --> 17:09.560 I T system specifically you on what is the amounted. I requested 17:09.560 --> 17:15.430 for fiscal year 2017 as well as in the out years was any out 17:15.430 --> 17:19.390 was additional money ally that aid to the top line produces role 17:19.470 --> 17:22.270 in the separate or is it coming out of hide. 17:23.000 --> 17:26.010 Uh what other resource it being provided for this effort. 17:26.680 --> 17:29.990 Is a car workforce sufficient to meet the demand it'll will additional 17:30.260 --> 17:31.560 personnel be diluted. 17:32.150 --> 17:36.160 Out will the department have sold decision making authority in-build 17:36.160 --> 17:39.790 the maintain the system or is it shared with no piano and other 17:39.790 --> 17:43.890 communities in what time wines have been established for delivering 17:43.890 --> 17:48.280 the system and a missed 11 uh. If I could do a mean I'm sorry 17:48.320 --> 17:52.710 media a would roll a will you have in doing this is a prices 17:52.710 --> 17:56.540 re engineering to change the way the I can be I'd be does business 17:56.780 --> 18:00.820 solely it fits the I T system about the other way round and if 18:00.820 --> 18:04.400 you meet leader bpa par that to be cut to science it's all list. 18:05.690 --> 18:08.100 So so what I like to because of do stick to question deserve 18:08.100 --> 18:10.860 a metre is all makes all common swell pulse like to take that 18:10.860 --> 18:14.490 for record it get back tea with some oh specifics answers here. 18:14.490 --> 18:17.070 The palm for seventeen. It's 95 million. 18:17.680 --> 18:22.200 There was a top-line increase to to deo guy ul for doing some 18:22.200 --> 18:25.540 of this um we'll get to the exact number. So of crossed up the 18:25.540 --> 18:25.860 fit up. 18:27.070 --> 18:30.130 And they're the fully spicy. There's not some can sermon dod's 18:30.130 --> 18:33.220 part about how this is gonna work and what I would issue where 18:33.220 --> 18:35.160 you is for most stamp point of the bill. 18:35.980 --> 18:38.880 We're gonna get the requirement from the group that's looking 18:38.980 --> 18:42.970 at how we're gonna fried do the whole investigation process. 18:43.830 --> 18:46.370 Well I have those with our mincing backward starts next week. 18:46.370 --> 18:50.450 We a member school that we would build a system that supports 18:50.450 --> 18:53.010 bills require minced of also one sure security. 18:54.040 --> 18:57.830 It it anytime. I think deep debts not happening. I I will be 18:57.830 --> 19:01.200 the first to let you will fall by a comfortable right now that 19:01.200 --> 19:05.560 we've worked out a governance process with all opium in all-win 19:05.560 --> 19:09.140 de debt that makes deal de the decision maker for all of the 19:09.140 --> 19:11.340 tactical decisions and the security decisions. 19:12.150 --> 19:15.420 But but I I am still concern in will have to see how but go forward 19:15.480 --> 19:18.720 and I'll get two more detail on the rest. The question to act 19:18.720 --> 19:21.480 I'd appreciate with edvard addition the Jou come divided. 19:21.820 --> 19:24.870 And this is sure we stay ready to support you in this the separate 19:24.870 --> 19:27.810 that should make the transition of a mistily in the with with 19:27.860 --> 19:31.390 regard to the business process reengineering. We definitely have 19:31.390 --> 19:34.880 less of a of role in that that we would have of the entire mission 19:34.910 --> 19:38.440 had been transferred do not too. So the park fans power was never 19:38.440 --> 19:41.550 gonna be entirely department stands in any case because as you 19:41.550 --> 19:45.640 know the the enya establishes a security guards policy. So we're 19:45.640 --> 19:48.880 always been after work with was outside a is season and reconcile 19:48.880 --> 19:52.640 differences with outside agencies. We're undertaking wifey Undersecretary 19:52.640 --> 19:55.700 of defense for intelligence to re engineer the deal a deep part 19:55.700 --> 19:58.830 of the process. We're looking a continuous evaluation we're looking 19:58.830 --> 20:01.980 at other measures to streamline organization history. Mine appro 20:01.980 --> 20:04.760 the process. So we do still have peace significant piece is a 20:04.760 --> 20:07.980 process assist the investigation piece that opn has but not the 20:07.980 --> 20:12.330 entire the entirety of the process as we do that we'll see places 20:12.330 --> 20:15.380 where we're going to within one tell we're gonna want changes 20:15.380 --> 20:18.480 and utopian piece the process and will have to work that's really 20:18.480 --> 20:21.030 inter agency because we don't control but we will work of the 20:21.140 --> 20:22.050 races to process. 20:22.950 --> 20:26.390 They're the Thank you get a titan missile engine we now proceed 20:26.390 --> 20:30.300 to cautioned of lamb burned of call ron uh. I think you and all 20:30.300 --> 20:33.700 get to the budget implications of this in just a minute but how 20:33.810 --> 20:35.520 active are we in working with. 20:36.130 --> 20:41.760 For a allies. So then made two allies israel it sector a in combating 20:41.840 --> 20:44.100 cyber threats and cyber attacks. 20:45.880 --> 20:49.310 Oh extremely active home a couple of things that we have don't 20:49.310 --> 20:53.480 like to talk about in this form always can't the five I'd community. 20:53.750 --> 20:58.010 We acts established lists year a it calls CIA L5. I'd crew. 20:58.080 --> 21:01.770 Did did meets a physically every six months hurts we every quarter 21:01.770 --> 21:05.100 our next meeting is in london. We're cyber security is certainly 21:05.100 --> 21:09.870 one of dup be capex always had besieged to to israel on exchanging 21:10.240 --> 21:15.380 odd data that that continues taxes came back from korea and japan 21:15.820 --> 21:19.430 where it that was a major topic I can tell you that the NATO 21:19.430 --> 21:23.950 partners to korea it to painter me have all adopted the deal 21:23.950 --> 21:28.310 de cyber security scorecard as the basis for measuring. How affect 21:28.310 --> 21:31.590 of we're doing allow cyber security basics across the border 21:31.590 --> 21:35.990 with that thinking. So upbeat great troupe. Um wu. So what we've 21:35.990 --> 21:38.990 we can probably do some more detail will take that the record 21:38.990 --> 21:41.890 but they are the major things that we're going to improve our 21:41.920 --> 21:42.710 information cheer. 21:43.550 --> 21:46.880 Let's get to hear and what do you have to any recommendations 21:46.950 --> 21:51.930 in the budget on may be making dead even stronger hurt. I mean 21:52.020 --> 21:55.240 I know you have a good budget that you're defending right now 21:55.240 --> 21:59.820 but uh uh he in DC me room for improvement in that area in particular. 22:00.560 --> 22:03.540 He he you know I do see well for improvement. But don't think 22:03.790 --> 22:06.840 right now that's a that's a money issue from prove but I think 22:06.840 --> 22:09.540 it's more of getting all of us a line to the right principles 22:09.540 --> 22:13.850 and basics um today. We've made good progress with seeing NATO 22:13.850 --> 22:18.360 in is I stayed the on japan and the cream germany there are some 22:18.390 --> 22:20.450 all the work when you do with other partners. 22:21.110 --> 22:25.320 I will be in a Stony uh uh in june working somebody sues and 22:25.370 --> 22:27.910 uh what I'd like to do was like come back from out off of a bigger 22:27.910 --> 22:31.180 sight picture is maybe give you of so moran says all like think 22:31.180 --> 22:34.540 we might need to do to go beyond slope are traditional allies. 22:35.200 --> 22:37.930 Oh kept precent. There when their objectives follow up on this 22:37.930 --> 22:40.930 conversation in another time they christian ideal back. 22:42.410 --> 22:45.560 Us a lemon we now proceed to caution gem cope are of Tennessee. 22:46.390 --> 22:49.180 Thank you miss chairman uh for so santa calls question. 22:49.970 --> 22:51.850 Also the mention that you're vodka more money. 22:52.570 --> 22:53.650 How much an for. What. 22:59.270 --> 23:02.710 I would say that as it there's the DC a moment are spas foetus 23:02.710 --> 23:05.310 finding efficiencies. I'm not actually looking for more money 23:05.310 --> 23:07.950 the Department's looking for more money. I'm trying to identify 23:07.950 --> 23:10.400 efficiencies within the department where I can free up money. 23:10.400 --> 23:14.130 So that we can invest 40 and I'm the it did long-range science 23:14.130 --> 23:16.700 and technology prep programs and for structure and things that 23:16.700 --> 23:20.370 we need to keep our force ready to an end and and ready to go 23:20.370 --> 23:22.980 today and raid on the future of that's that's weren't where I 23:22.980 --> 23:26.390 mean more money out a deferred mr. Halverson assists disaffected. Despots. 23:29.420 --> 23:32.920 Upgrade some of our legacy systems and uh and I can get back 23:32.920 --> 23:36.890 to without with the number on that came to to to tied back with 23:36.890 --> 23:41.520 peter icing some investment in the legacy systems particularly 23:41.520 --> 23:42.650 some also. 23:43.510 --> 23:48.030 The larger bowl fate. So our personnel and pay systems those 23:48.030 --> 23:51.150 investments with the two things for us one we would certainly 23:51.150 --> 23:54.570 improve security there is some me she's been fixed air sector 23:54.570 --> 23:58.400 yet that we can improve efficiency and af to we made those investments 23:58.400 --> 24:01.030 I actually think the return on investment would be pretty go. 24:01.030 --> 24:02.640 But I will come back tea with the numbers. 24:04.120 --> 24:06.930 Thinking of mela screech question. 24:08.000 --> 24:11.560 Down is always taught above all to a bowl of all government agencies 24:11.560 --> 24:14.370 is bitter its factor for the geo for 20 years the number one 24:14.370 --> 24:15.000 risk factor. 24:15.660 --> 24:17.630 Will the euro. I T work. 24:18.260 --> 24:20.610 Help the Pentagon that all of that faster. 24:21.360 --> 24:25.070 The answer you see is yes I'm liam pro-business systems improve 24:25.070 --> 24:28.630 financial system financial men to systems deaf might make an impact. 24:29.000 --> 24:30.130 I'm weak. 24:31.120 --> 24:35.260 We arm much closer to date to be a lot of walls and we were 10 24:35.260 --> 24:38.090 years ago with a significant part of that is because of the erkki 24:38.090 --> 24:42.260 investment but there are many many hurdles we have to do we have 24:42.260 --> 24:46.230 to get over that are not I T and I teeth canceled of myself we have. 24:46.920 --> 24:49.660 Policy issues that would been kicking down the road 10 years 24:49.660 --> 24:52.720 that now that we're facing a 27teen deadline. We're finally getting 24:52.720 --> 24:55.510 people to be serious about safety. Yeah we actually have to make 24:55.510 --> 24:57.700 those decisions. We have to figure out how are gonna go about that. 24:58.410 --> 25:02.980 Um so I'm that the DC image quote fiercely the governors for 25:02.980 --> 25:05.630 the fired Airbus board which which is responsible for trying 25:05.630 --> 25:08.480 to to divide with a drive the department toward auto with the 25:08.480 --> 25:12.810 comptroller with my record um and says I ride the department 25:12.810 --> 25:15.700 about 10 months ago we've been trying to we've we've we've we 25:15.700 --> 25:19.540 set the department of on a programme of identifying. But what 25:19.570 --> 25:23.580 error keady a key inter milestones are that we need to hit in 25:23.580 --> 25:27.290 order to become a up on it of all we've identified a lot of things 25:27.320 --> 25:29.910 that should have been the dress fighters door 10 years ago but 25:29.910 --> 25:33.600 we're trying to chip away at I'm one of his time and and a word 25:33.790 --> 25:37.800 we think that they that the deadline um is extremely constructive 25:37.800 --> 25:40.740 in pushing us toward that objective. So department seems to have 25:40.990 --> 25:44.350 an infinite ability of kicks things down astray man facing asing 25:44.660 --> 25:48.440 and that it deadline. It's two years away pups really helps focus. Attention. 25:50.650 --> 25:54.010 Some people say 27teen as next year about two years away. 25:54.500 --> 25:58.160 It's october one 27teen I guess we can be your in aphids with 25:58.160 --> 25:59.220 that achieves answer. 26:00.320 --> 26:02.620 Owes us out like you're very optimistic about mating that that 26:02.620 --> 26:06.040 law and when I came before the senate arm sirs. Come. Am. I a 26:06.070 --> 26:11.060 him for mike a. Nomination hearing about almost exactly a year ago. 26:11.110 --> 26:14.230 I I testified that I could never been fountain of the department 26:14.230 --> 26:17.190 was on a me to deadline and I couldn't changed my position just 26:17.190 --> 26:21.100 because I was just fine for for for for before affirmation so. 26:21.710 --> 26:25.460 Can't change my story now I'm I'm skeptical is that we will do 26:25.550 --> 26:28.240 with it we will have done everything we need to do but I'm an 26:28.240 --> 26:30.440 of pushes karzai possibly can to get a set. 26:32.580 --> 26:35.640 Okay mellow long-awaited question of the ghost of christmas past 26:36.070 --> 26:37.930 three toward cheese pack. 26:39.070 --> 26:41.400 Father was a pair by somebody who signed on to. 26:42.070 --> 26:45.520 And a mal like the equivalent of from the Nigerian cramps or something. 26:47.120 --> 26:48.630 But first and unidentified. 26:49.460 --> 26:50.520 To open that. 26:51.410 --> 26:54.790 Foolish email and would it help if they were identified cafe 26:54.790 --> 26:56.800 have not been identified. Previously. 26:59.450 --> 27:01.410 I will say to the people didn't. 27:02.710 --> 27:06.070 Female have been identified and we have looked eight to reasons 27:06.070 --> 27:10.450 why in some cases we did some remediation of other cases. 27:10.990 --> 27:13.350 They had followed fall. Right procedures. 27:14.030 --> 27:17.170 All up to openly and we needed to do so more training that has 27:17.170 --> 27:21.360 been poured-in-place ought to do that but also state that was 27:21.390 --> 27:25.600 also won the was caught pretty quickly. We had free limited exposure. 27:26.180 --> 27:28.610 Um. But you still would likes to better. 27:29.240 --> 27:33.150 But the system and then when you look act a volume of email traffic 27:33.500 --> 27:37.080 to comes in to duty on me we get and the number people that clicked. 27:37.870 --> 27:38.690 Great improvement. 27:39.830 --> 27:43.440 We are certainly holding people accountable for higher standard now. 27:44.030 --> 27:47.550 And um we signed out to a cyber accountability culture document 27:47.920 --> 27:49.260 will sign bite to us. 27:50.020 --> 27:53.640 That sect asked myself frying candle and like Rogers have signed 27:53.640 --> 27:54.300 out so. 27:54.870 --> 27:58.800 Accountability procedures document known to make it down to the 27:58.830 --> 28:00.160 individual in command level. 28:00.720 --> 28:05.530 I think we've made progress a in that area a who like don't think 28:05.530 --> 28:07.250 identifying anymore. 28:07.950 --> 28:10.530 Individuals any a more level would be helpful right now. 28:12.890 --> 28:14.600 See my time has expired restaurant. 28:15.410 --> 28:15.920 Thank you must. 28:16.560 --> 28:19.370 Precede economists woman released upon. I could new york. 28:20.510 --> 28:23.110 Mister chairman and think is the perilous for being here today 28:23.150 --> 28:26.760 I had two questions the first one will be quite broad. The second 28:26.760 --> 28:30.380 one will be quite specific um as you are. Well aware the threats 28:30.380 --> 28:33.170 to the United States have evolved dramatically in the last 10 28:33.170 --> 28:36.670 years state and non state at the series had adapted to would 28:36.670 --> 28:40.020 new digital of farming quite well and it is important that the 28:40.020 --> 28:43.270 United States invest in the time training in infrastructure to 28:43.270 --> 28:46.930 counter the whole spectrum of cyber threats. So as we see in 28:46.930 --> 28:50.630 the news cyber papa quiche against beat DIA de infrastructure 28:50.820 --> 28:53.870 continues to increase. What is your assessment of the deities 28:53.870 --> 28:57.770 ability to counter such intrusions today and what can I tell 28:57.920 --> 29:01.850 soldiers that I represent act for drama might district what we're 29:01.850 --> 29:05.210 doing to ensure that they are protected and one of the learned 29:05.210 --> 29:07.650 about the enemy and how has that changed our approach. 29:07.680 --> 29:09.140 That's the first brought. Question. 29:11.000 --> 29:13.810 Good outbid so common to local will take if it were just think 29:13.810 --> 29:16.370 it's a good question. We'll lisa better details on that. 29:17.060 --> 29:20.940 We certainly can improve training across the board and go cyber 29:20.940 --> 29:24.950 spectrum um. But cyber security culture issue is one that's on 29:24.950 --> 29:26.240 top of the secretaries. 29:26.780 --> 29:30.750 On desk uh. We weeks. We meet every month on the cyber scary 29:30.750 --> 29:33.400 scorecard and a part of that gets to what is the training. 29:34.080 --> 29:38.030 All and individual PS the networks themselves arm watch better 29:38.060 --> 29:42.430 today palm they are not exactly where we want them a weird debts 29:42.430 --> 29:44.720 three major efforts to improve debt. 29:45.230 --> 29:48.550 On the first one is your plea aware that will the circuitry is 29:48.550 --> 29:53.010 directed that this year we move as moche of dod is possible the 29:53.010 --> 29:57.290 ones are on Windows operate systems to we Windows and Baseball. 29:58.190 --> 30:02.230 Cannot stressed the critic kelly of all skating that Dylan. 30:03.180 --> 30:06.180 Right now when you try to look at the visibility to networks 30:06.500 --> 30:09.490 while we're making improvements seared dueling dad across multiple 30:09.530 --> 30:13.050 operational systems hopeful bracelet. It's impossible to do the 30:13.050 --> 30:16.470 well getting to was singled baseline for Windows in the what's 30:16.470 --> 30:19.470 up doubt adt 85% of the dod. 30:20.600 --> 30:22.970 Will do is see ability to have better visibility. 30:24.030 --> 30:27.690 Windows tennis the first operating system debt repeat for up 30:27.690 --> 30:30.710 doubts security right from the beginning it has inbuilt features 30:30.710 --> 30:31.990 that we will take advantage of. 30:33.590 --> 30:37.730 It will also I'll Alice could go to the next step which is how 30:37.730 --> 30:42.780 to use than start taking in really using cloud computing technology 30:42.810 --> 30:46.570 to improve few were security. So we're positioned to do that 30:46.600 --> 30:49.690 we've got things we after the dawn and the first lowlands to 30:49.690 --> 30:54.220 get the Windows tended the other big initiative is to complete 30:54.220 --> 30:55.950 the joint regional security stacks. 30:56.470 --> 31:00.490 In its simplest form what that pose is low war our footprint today. 31:00.490 --> 31:03.180 We've got a thousand points that you can come in when the joint 31:03.210 --> 31:06.290 spurs regional scary stacks a dumpling was less than a hundred 31:06.290 --> 31:10.150 poets that's a lot easier to defend we can focus for what it 31:10.150 --> 31:13.230 also stop the from doing our own self the my with the acts which 31:13.230 --> 31:13.880 are also in. 31:14.390 --> 31:15.620 Happen when you're trying to. 31:16.310 --> 31:20.120 Keep a law aimed over a thousand different firewall will reduce 31:20.120 --> 31:24.040 the fire walls have better overall security invisibility into networks. 31:24.070 --> 31:27.160 That's what we're doing the began to set the specific qwest center 31:27.160 --> 31:31.070 actual follow ups to your dancer out when you reference the cyber 31:31.070 --> 31:35.060 security scorecard process. What is the scorecard. Exactly key 31:35.060 --> 31:38.440 get into more specifics can this information and well this information 31:38.440 --> 31:39.740 be shared with congress. 31:40.250 --> 31:44.210 Are there plans to expand kirk scorecard beyond cyber security 31:44.240 --> 31:49.260 and how does it negative scorecard raiding. I'm of the DIA de component. 31:49.260 --> 31:51.530 What is the consequence of that. 31:53.480 --> 31:55.720 Again will give you some more details on writing. But here's 31:55.720 --> 32:00.170 like of ada scorecard is looking at we've to find great now as 32:00.200 --> 32:04.590 basic air use that we show would it be of may from one of the 32:04.590 --> 32:10.090 man's is everybody using a E secure token and to access um deal. 32:10.090 --> 32:10.850 The systems. 32:12.470 --> 32:15.230 That fantasy that is it the the is it is immediate if you're 32:15.230 --> 32:18.400 using the token pay. We know exactly to lobby when a lobby and 32:18.400 --> 32:23.790 whether rat and it is a lot harder to state that it access to 32:23.820 --> 32:25.060 its if it's immediate. Crusade. 32:27.770 --> 32:30.760 Share that exceed the of happy due to we've actually seared of 32:30.760 --> 32:33.850 luck ladies and I'm happy to send one over while I get back the 32:33.850 --> 32:37.300 current all scorecard and the results of the scorecard sit results 32:37.330 --> 32:40.900 is right on it will show you rate were act um. We are not where 32:40.900 --> 32:43.080 we want to be in and all of the areas. 32:43.710 --> 32:47.770 We are measuring ourselves. So extremely high standards one of 32:47.770 --> 32:50.530 those things that I just for most different when you look at cyber. 32:51.490 --> 32:54.600 You could get 80% and a lot of people would think that would 32:54.600 --> 32:58.880 be good in cyber that's not good enough. So when when you see 32:58.880 --> 33:02.160 the wearing yellow and in some cases it re aid to those were 33:02.160 --> 33:06.340 trying to get a ball that almost every category 95% to be to 33:06.340 --> 33:09.570 be cream and like until last question as he talked about the 33:09.570 --> 33:13.440 department plans to move to the Windows 10 operating system with 33:13.440 --> 33:17.760 a mandate to do so by certain date. What is the cost of that transition. 33:18.350 --> 33:21.380 But don't mildew jack call ship will get that to you what I'd 33:21.420 --> 33:25.520 clue to get that call Austin not to do that would be in the billions. 33:25.590 --> 33:28.470 Great I'd look for to getting more of that in writing afterwards 33:28.920 --> 33:29.520 idea back. 33:30.220 --> 33:33.510 Thank you can summon symphonic winnow and proceed to coleson 33:33.560 --> 33:35.500 pete Aguilar of. California. 33:37.320 --> 33:37.920 Mr chairman. 33:38.550 --> 33:43.360 Up mr. Person Kinney tech to me I'm broadly about to uh uh in 33:43.360 --> 33:46.840 your testimony talk about clack computing where we're will cloud 33:46.840 --> 33:49.530 computing be in in five years and in 10. Years. 33:51.890 --> 33:56.650 In five years. I am I am hopeful that we will pee in of all malls 33:56.650 --> 34:01.420 complete virtual clown environment and clown defined this way a. 34:02.320 --> 34:06.300 We'll have prided clowns which are completely private with stained 34:06.300 --> 34:11.160 cup segments of dod will have private clouds that arc just dod. 34:11.490 --> 34:14.660 You know inside it will have private cloud cigar deo de in other 34:14.660 --> 34:15.820 parts of several government. 34:16.800 --> 34:20.520 And then we'll have I a brit public clouds because of the size 34:20.520 --> 34:23.390 of duty to federal government. We ought the a will to move into 34:23.390 --> 34:26.710 where we would have government hybrid klaus post each in. 34:28.460 --> 34:32.240 Can martial centers as opposed to some within to talk about all 34:32.240 --> 34:35.420 your would would be on premise it would get lost dubbed best 34:35.420 --> 34:37.810 combination of mission security in value. 34:38.480 --> 34:41.830 Is ever to me many john about um a page three of your testimony 34:41.830 --> 34:45.500 mission partner environment. All when you're talking about commercially 34:45.530 --> 34:49.590 a achy accessible. I'm a reconfigure bowl unsecured data that 34:49.620 --> 34:53.010 they can be shared with with commanders in the broader that that 34:53.040 --> 34:57.500 the mission partnering farming would certainly use cloud technology 34:57.500 --> 34:59.900 but what the neck part of testimony when a really talking about 34:59.900 --> 35:01.600 is how we would be able to. 35:02.130 --> 35:07.340 Support our Co com commanders as state partner ways both traditional 35:07.340 --> 35:10.880 non-traditional allies to soap or what ever mission is to be 35:10.880 --> 35:11.880 able to stand up. 35:12.740 --> 35:17.310 Virtual networks on the fly to be able to tuesday at bolts at 35:17.310 --> 35:18.300 a secure or level. 35:19.430 --> 35:23.510 It'd speed doubled. It we need an end to keep its fiscal we responsible. 35:24.190 --> 35:26.930 It can can talk a little bit about how that paddian dishing that 35:26.930 --> 35:29.490 working and what are stakeholders in coalition partners with 35:29.490 --> 35:30.820 their role in in that would be. 35:31.790 --> 35:36.000 In that so as we can move to UCLA al technology one of the things 35:36.000 --> 35:39.820 dictate we've got to recognize us. We've got to get our came 35:39.820 --> 35:42.900 pt is gonna have to be commercial that just. 35:43.520 --> 35:48.070 In one octavia wouldn't do this spat say us only based system 35:48.400 --> 35:51.890 state other pieces of our allies couldn't afford that and it's 35:51.920 --> 35:54.090 it's not what they're going to agree to do so. 35:54.620 --> 35:58.680 Basing this on a commercial set of technology could also be uses 35:59.000 --> 36:00.340 commercial classify. 36:01.160 --> 36:05.680 Balance sheet will Alice cup and in the quelled put together 36:05.740 --> 36:10.430 baby the virtual network that that that's a we had a um this 36:10.430 --> 36:12.420 early did say applied to that we to the test going. 36:13.010 --> 36:16.830 We've done this but see we had a a natural disaster date. 36:17.540 --> 36:21.880 Have allies now like the chinese the cube in this all us they're 36:21.880 --> 36:24.430 not traditional Allen's we could actually stand up a network. 36:25.150 --> 36:28.750 Once we get some other technologies in place that would allow 36:28.750 --> 36:29.920 data to be she aired. 36:30.530 --> 36:33.580 Ended but say we wanna share data with china. We wanna see eric 36:33.580 --> 36:35.950 data with to will but not exactly the same day that we can't 36:35.950 --> 36:38.730 do that on a network with the right protect seems to protect 36:38.760 --> 36:41.080 the data that we need use seeing. 36:41.670 --> 36:43.700 All whole std commercially available. 36:44.320 --> 36:47.050 Technology today there's a few pieces that after the don't but 36:47.080 --> 36:49.550 I am like no doubt they will be done by the end of this year. 36:50.600 --> 36:53.820 Wow look look for dissing that development and and our discussion 36:53.820 --> 36:56.390 about the moon fourth. Thank you so much leo backers traffic. 36:57.290 --> 36:59.850 Thank you to us tonight will or winnow proceed to comes from 36:59.850 --> 37:02.220 bread as for it all the way from Nebraska. 37:03.110 --> 37:03.720 It it. 37:04.520 --> 37:07.230 It's a lot trick every morning thank thank you miss chairman 37:07.540 --> 37:08.560 uh pretty will uh. 37:10.090 --> 37:13.600 A you really get here. I'm a is uh I said. 37:14.510 --> 37:15.480 My name unbeaten. 37:16.330 --> 37:17.500 That raised the issue died. 37:18.050 --> 37:21.820 Them try and understand further than your popped ranchers were good. 37:22.240 --> 37:25.470 I just I won a further understandable little bet at because we 37:25.470 --> 37:28.040 talk a lot about employee exchanges with the private sector. 37:28.770 --> 37:33.260 Um than did the need for a um can additional authorities to do 37:33.260 --> 37:34.290 that up. 37:35.030 --> 37:39.180 It seems to me it's critical part of the of what worked in the 37:39.180 --> 37:42.390 plan going forward in them with the talent out there and and 37:42.390 --> 37:45.770 the demands on the budget and be able to bring people in and you'd. 37:46.550 --> 37:49.880 Cash from my engine hit a hundred % muted is one masters. 37:50.870 --> 37:54.640 What what do we have to do in order to. 37:55.350 --> 37:58.080 But that what it seems to that some we could move from should 37:58.080 --> 38:00.620 be of la move on and what what what sort of authorities. 38:01.830 --> 38:04.910 Orient no that would would we need in order to. 38:05.810 --> 38:06.210 Do that. 38:08.180 --> 38:10.990 The denied like come back to work but a here's a with the ice 38:10.990 --> 38:14.710 think of the first period today there are kissel statutes to 38:14.710 --> 38:18.200 backseat purge of the muscle giving us this season authority 38:18.200 --> 38:19.630 to those type positions. 38:20.290 --> 38:23.750 Wall we circle a lot to protect him and make sure that the government 38:23.750 --> 38:27.020 is in the and responsible for this season if i've got somebody 38:27.330 --> 38:29.200 industry select. What was take class. 38:29.990 --> 38:32.140 The best clout engineers they are not in the gulf. 38:32.710 --> 38:34.870 When they're not we it's really build ones but the best ones 38:34.870 --> 38:35.740 today earn industry. 38:36.320 --> 38:38.980 Vaudeville the get some on an iota bill will assign what I'm 38:38.980 --> 38:42.200 saying peter the league cloud engineer for this year the your 38:42.200 --> 38:46.890 do one this work with else and give them the authority to make decisions. 38:47.420 --> 38:52.060 And with some oversight to expand docks to date under the current 38:52.060 --> 38:55.800 40 sets hard to do I need to do some work throughout what dead 38:55.800 --> 38:59.600 should look like an all come back to buy the summer of exclude 38:59.600 --> 39:01.160 go with some. Recommendations. 39:02.690 --> 39:06.580 Because That that troy that sets extremely helpful lie and it 39:06.580 --> 39:10.460 seems to me that there are areas for he suggests a private sector. 39:11.010 --> 39:11.350 Or it. 39:11.960 --> 39:14.830 The non governmental sector have those matched the key so. 39:15.880 --> 39:17.080 Thank you is term that's all I have. 39:18.440 --> 39:22.220 Then don thank you commission ash ridden a do the downpour in 39:22.220 --> 39:24.500 these issues are will proceed with the second round. 39:25.140 --> 39:29.790 And a missile a vein a dear day doesn't have a stellar track record. 39:30.170 --> 39:33.860 And deploying business side sees systems. What recommendations 39:33.860 --> 39:35.360 would you have to make. 39:35.990 --> 39:39.940 To improve our abilities to deploy a business systems and second 39:39.970 --> 39:44.420 like hal can we improve henri shape the workforce to better it 39:44.420 --> 39:47.570 can take an employee and manage these buzzes systems. 39:48.310 --> 39:51.200 Purse we don't just not a seller record. We have our ran its 39:51.200 --> 39:54.900 record for this assistant. I think that I'm of all the things. 39:54.900 --> 39:58.050 So we do badly this one of the ones we do worst. So I'm. 39:59.510 --> 40:02.190 They're a member is saying is that that that we need to do on 40:02.190 --> 40:05.000 our side of river to do better. I'm one of the things that we 40:05.000 --> 40:07.850 need to was to recognize abyss assists in some cells are not 40:07.850 --> 40:10.270 gonna solve our problems that what we need to look at it is the 40:10.270 --> 40:13.360 process sees that word that word that were a. 40:14.330 --> 40:17.600 That we are I'm on a mated solely due to huge try to automate 40:17.600 --> 40:21.560 mold process without looking yet at that figure NASA works your 40:21.560 --> 40:24.750 that your your doomed to failure that we've tried to many times 40:24.750 --> 40:28.530 to buy and also she'll system and and said today uses this this um. 40:28.530 --> 40:31.910 Well the head the uses says is so common in tell us what that's 40:31.910 --> 40:34.700 not exactly the date we what we want this other data because 40:34.700 --> 40:37.500 that's what we always use so we start turning apart. The guts 40:37.530 --> 40:40.300 of an office shelf system and before you know what we spent five 40:40.300 --> 40:43.810 times as much to re engineer the system and to rebuild the system 40:43.810 --> 40:47.420 as a process of was so we have to control wire bon appetite and 40:47.420 --> 40:49.500 that's something that we're working on within the department. 40:50.060 --> 40:55.140 Um. In terms of what you could do to help us a so I voted one 40:55.140 --> 40:57.640 thing that that I would say that you could do to tell us about 40:57.640 --> 40:59.490 hope that I hope you think about the is. 41:00.030 --> 41:05.230 Um as we look at the the Processed of we esa goes through for 41:05.230 --> 41:08.400 business systems of right now as a said we're gonna try to work 41:08.400 --> 41:10.990 with the with the acquisition to me you to re engineer that because 41:10.990 --> 41:14.380 we have a system where we were um week we go so and invested 41:14.380 --> 41:17.530 review process. We identify potential solution and maybe of its 41:17.530 --> 41:20.160 20 million dollar fixed oprah more you do a tanker was and exists 41:20.160 --> 41:23.050 in system. We didn't have to stroll over there over the special 41:23.130 --> 41:25.940 or the trans some to the acquisition to many that may set up 41:25.940 --> 41:28.610 a program office that in itself will cost 20 million dollars 41:28.610 --> 41:31.660 in the come to us with a solution which use west bill de palma 41:31.660 --> 41:34.710 system from scratch with that's crazy. So we're gonna try to 41:34.710 --> 41:37.970 re engineer that within the department there may be places where 41:37.970 --> 41:40.910 we come to you for assistance in in doing that reengineering 41:40.940 --> 41:43.370 and it's one place and for tick that point to which is. 41:44.180 --> 41:47.830 Right now from what I presume are historic reasons. We have one 41:47.830 --> 41:51.590 set of thresholds for what a quote major defense acquisition programs. 41:52.880 --> 41:55.550 We have another set a threshold for what are called major automated 41:55.550 --> 41:59.170 information says such programs and Epson Masons the may use threshold 41:59.170 --> 42:02.720 are wait wait low or a ordered. I don't know couple orders of 42:02.720 --> 42:05.620 magnitude lower than the threshold for and that's but we treat 42:05.620 --> 42:09.350 them as the same set what that means is that while we have in 42:09.350 --> 42:13.990 19 abyss assists of investment we trigger aid in the process 42:14.020 --> 42:17.890 on the acquisition side which is is a big and as clumsy as the process. 42:17.890 --> 42:21.240 We have on the acquisition Seibel more buying an aircraft carrier 42:21.240 --> 42:23.490 a fighter aircraft or something like that and if you're buying 42:23.490 --> 42:26.400 of there's a system I'm not true that makes sense I think if 42:26.400 --> 42:27.180 he'd look yet. 42:28.250 --> 42:31.380 We're a tree maybe systems and and that's the same unwed even 42:31.380 --> 42:33.750 need to treat them in the same way and legislation I think that's 42:33.750 --> 42:36.480 something constructive the could help lots in stream. I know 42:36.510 --> 42:39.700 streamlining our own internal processes will to make your own domain. 42:39.700 --> 42:44.430 So candid and it to this site to a technology changes so overnight. 42:45.020 --> 42:47.880 And so and I know it's extraordinary talent the would pre say 42:47.880 --> 42:51.860 both of you poet dear don't also I'm grateful others Halverson 42:51.890 --> 42:56.250 a handout is a your association was rotary international a years 42:56.250 --> 43:01.030 services a paul harris fell uh. I'm happy to be with you. 43:01.640 --> 43:06.680 So I'm But in a question I'm mr. Elder son inspect some as a 43:06.680 --> 43:08.540 vital resource for that apartment. 43:09.490 --> 43:14.230 He's also one that wearing crease in compass is switched commercial sector. 43:14.670 --> 43:17.770 What challenges to see over the next two years might come. 43:17.770 --> 43:22.970 So the dod's use of spec trump. What recommendations who to make 43:23.220 --> 43:27.610 tram pros a responsiveness of the regulatory process to including 43:27.610 --> 43:30.410 national security concerns in economic. Priorities. 43:32.510 --> 43:36.310 Puts it today work more in a good spot the hard work with spectrum. 43:36.830 --> 43:39.070 Um we did. Well what the last auction. 43:39.580 --> 43:43.460 And the moni use fair to to change where deo guy can move in 43:43.460 --> 43:45.230 share specter. What I worry about. 43:45.740 --> 43:49.980 Right now is debt to pricey domain and for spectrum is going 43:49.980 --> 43:55.490 to exceed our ability to keep pace ball and it we wouldn't be cool. 43:55.490 --> 44:00.200 It if we're not careful put some um national systems at risk 44:00.610 --> 44:04.730 some of this takes Collin and in this business I get that crime 44:04.730 --> 44:08.480 is really valuable wanted is money but there is a physical limitation 44:08.480 --> 44:13.330 doubt fay ask. We can move the dod systems either infant ability 44:13.330 --> 44:15.680 to share specter or out of salt Spector. 44:16.280 --> 44:19.600 And and I worry mick maybe because we're victims of our own success. 44:19.600 --> 44:22.230 We've done very well indeed legislation he's been written in 44:22.230 --> 44:24.070 the sharing has all work to date. 44:25.000 --> 44:27.890 But what I hear from the industry rate Dou's will wanna go fester 44:28.160 --> 44:32.340 and I don't know that we can go all mod fay esther today on how 44:32.370 --> 44:36.230 we looked expect drum make a decision to where we can get out 44:36.260 --> 44:37.540 and how we would cheer. 44:38.540 --> 44:42.430 I would also tattie it debt Wall I think industry is starting 44:42.430 --> 44:46.170 told look at making their own investments in helping us sheer it. 44:46.170 --> 44:47.520 They are just starting that. 44:48.110 --> 44:50.050 I think one of the things wind look at is. 44:50.640 --> 44:53.700 I'm happy to be measured or Halle deo guy is making investments 44:53.700 --> 44:56.610 to share we always think about some measurements that we would 44:56.610 --> 45:00.040 give industry to say how are you doing in making the investments 45:00.040 --> 45:03.980 to your your it contributions to helping us get to that state. 45:05.040 --> 45:08.010 Thanks very much a known to ranking member gem orange men. 45:10.520 --> 45:12.690 Gem again things for witnesses for being here. 45:13.340 --> 45:16.160 Of see yes take had the up to sit down have a have a sit down 45:16.160 --> 45:18.980 with that that the national Street buys your ever attain said 45:19.370 --> 45:23.300 uh of the homage trudy vice or um is to monaco to discuss that 45:23.630 --> 45:26.970 comprehensive national uh uh sends treaty initiative. 45:27.560 --> 45:31.920 Edit strained and an advocate for for many the other vocals los 45:31.920 --> 45:35.570 onto the the sian cypher for some time and specifically the appointment 45:35.570 --> 45:40.020 of an individual at a executive of oversee federal a a a CYB 45:40.020 --> 45:44.300 Street enterprise and to bid for the probably think that the 45:44.300 --> 45:47.580 the peak in the dot com side. The we don't have anybody in chart 45:47.630 --> 45:50.640 with both policy budgetary authority can reach across government 45:51.020 --> 45:54.670 in compelled Thompson agencies to do with the need to do inside 45:54.670 --> 45:58.200 for camps have things like the yolk pm preached that uh that 45:58.270 --> 45:58.970 that that happen. 45:59.580 --> 46:04.170 I'm dead in the eau de by the way you gave him a is doing but 46:04.170 --> 46:07.210 much better job in to beat defending that the doddle network 46:07.210 --> 46:10.260 in and all those difficult says challenging is it is it's important 46:10.730 --> 46:15.320 uh the doing good work. But he describe how I dod fits in the 46:15.320 --> 46:20.020 overall odyssey nap bad as each called in and more specifically. 46:20.520 --> 46:24.550 I'll add how beauty when track with the yet to be we a individual 46:24.580 --> 46:28.730 they uh that that that the federal and chief of mission security 46:28.730 --> 46:33.000 officer uh will be played to quite make a essentially to policies 46:33.080 --> 46:34.450 and and activities. 46:35.870 --> 46:39.920 Day a team before the legislation we've partner extensively with 46:39.920 --> 46:41.520 a fickle see IO tony sky. 46:42.320 --> 46:45.610 Um I think tony when he came in brought film new why de it is 46:45.650 --> 46:46.450 an to the federal. 46:46.990 --> 46:51.270 Side we are certainly support moves that and it will continue 46:51.270 --> 46:51.990 to do so. 46:52.580 --> 46:56.420 Uh as The airy is did the federal government. 46:57.100 --> 47:00.320 Is looking yet are applicable to duty will play will fight hard 47:00.320 --> 47:02.990 of will support those will continue. 47:03.650 --> 47:07.620 To it via nice of tony war that in a new with in his listen point 47:07.650 --> 47:09.070 all where we think there are. 47:09.790 --> 47:13.170 Things that dod is the wing that should be applied to the rest 47:13.240 --> 47:16.650 of dolphin a government and we will take those things a really 47:16.650 --> 47:20.920 working applied the within on dod. I think the establishment. 47:21.530 --> 47:26.170 Often use a into debt the ski ought to success inside the rest 47:26.170 --> 47:29.040 the federal government. I think there are some opportunities 47:29.040 --> 47:30.260 for oscar beauty. 47:30.950 --> 47:35.660 Set that home one all to me is as we've rebuild the the the and 47:35.660 --> 47:39.250 they have that we look at the lesson slur of by note Colleen 47:39.250 --> 47:41.990 add agreed today that we gotta take bills lessons learned and 47:41.990 --> 47:44.660 applied them across the federal government any place that that 47:44.660 --> 47:48.930 we see that the trap of old will we will do that. Take. 47:49.500 --> 47:54.760 Um. What progress is dod made on and cloud computing specifically 47:55.240 --> 47:58.210 a tri nation integration of bucket billions provided. 47:58.730 --> 48:01.200 Up by such a service providers sent out. 48:01.720 --> 48:05.620 Of either enough that is certified to creative compared to field 48:05.620 --> 48:08.990 and in a hollow eyes security concerns being rest. 48:10.970 --> 48:14.260 Progress the two things. I think that I will would like the point 48:14.260 --> 48:17.480 that we salem times did dod's behind in clap. 48:19.020 --> 48:21.980 So I wanted to really notice that was true was so i've a asked 48:21.980 --> 48:25.550 a might stay ass and espouse it to take a look it. How does duty 48:25.550 --> 48:28.050 compare in the use of clout with. 48:28.570 --> 48:31.550 All there are fortune fifty-four peer competitors. 48:32.090 --> 48:35.780 We're actually slightly ahead of mole still the fortune 50 and 48:35.780 --> 48:40.260 the use of clout we are now embarking on to win more but it dole 48:40.310 --> 48:44.900 adults think dod's behind issue. Look particularly that the financial 48:44.900 --> 48:48.340 industry which has some very strong security similarities to 48:48.340 --> 48:51.690 costs they have been ejected we've done a takes older public 48:51.690 --> 48:54.540 facing Stahl from it put in a cloud we've done that with with 48:54.540 --> 48:55.380 could success. 48:56.660 --> 48:59.700 The next two things that we are two-wing hannah and we have now 48:59.730 --> 49:03.160 dakim's certifications an awful them the start being competitive 49:03.500 --> 49:08.460 is to locate pow weep praying industry into all and premise. 49:10.040 --> 49:13.820 Bow of all for its we do that right nell furry limited police 49:13.820 --> 49:17.910 through the engine contract of the navy put in place we're actually hp. 49:18.450 --> 49:19.230 Is running. 49:19.760 --> 49:23.170 Navy data centers to include baby data centers a to secure or 49:23.170 --> 49:26.010 level old cram for than eighty. 49:26.790 --> 49:31.300 We are using a up model and we're going to expand at across stow 49:31.330 --> 49:33.250 rest of dod. 49:34.340 --> 49:37.700 I will have some all couple are if I say out here in the next month. 49:38.520 --> 49:41.830 We have a couple contracts that we're gonna let that Wal Wal. 49:43.570 --> 49:48.510 For commercial tainted cheese to calm a met at the level for 49:48.550 --> 49:51.860 level in certification which is right blow call that the class 49:51.860 --> 49:53.290 fight on data. 49:53.830 --> 49:57.390 On and we have some work being Dylan cup. I Wal or. 49:58.520 --> 50:02.520 Companies to partake into classified space to do so I I just 50:02.690 --> 50:05.640 making good progress that we've gotta stay on top of that. 50:06.650 --> 50:11.160 I hope this summer. If the Windows painting gce goes. Well the 50:11.160 --> 50:15.380 next announcement did we will made will be that deo de has decided 50:15.410 --> 50:19.090 to go to a more complete cloud in firemen. 50:19.700 --> 50:24.660 Similar to and I I just used this is in disabled is not of the season. 50:24.950 --> 50:29.420 But is similar to what a Windows three sixty-five clout in farming 50:29.450 --> 50:33.120 would do yet half to get to that next phase to really take full 50:33.120 --> 50:34.980 advantage of the cloud across the board. 50:36.140 --> 50:39.590 They can I just editing them. I know my kinesics by by will sake. 50:40.190 --> 50:43.490 I hope it along with all of this we obtain max mmhm attention 50:43.520 --> 50:48.230 to the security of the clout um it. It does still concern me 50:48.230 --> 50:51.240 that you know we have that crown jewels in and some leases all 50:51.240 --> 50:55.520 in one place and my my college and Cooper out likes to use the 50:55.650 --> 50:59.240 theory for the the cloud is the acronym for chinese love our 50:59.240 --> 51:00.030 uploaded data. 51:00.570 --> 51:04.560 I have an dez so that security can't be tight enough to start 51:04.560 --> 51:05.280 some concern. 51:05.840 --> 51:09.760 Look I'm still afraid to check it won't minute. We agree and 51:09.980 --> 51:12.660 one of the reasons that we are we always cloud. It's the same 51:12.660 --> 51:16.130 reason the financial industry is where it's with clout we too 51:16.130 --> 51:18.820 would have some things we have to make sure in securities right 51:18.820 --> 51:22.550 and will the mayor's had you achieve for tools separation. So that. 51:23.090 --> 51:26.750 You don't get the effect of everything being loaded one spot 51:26.780 --> 51:30.510 and it can be extra traded and if it does to penetrated how'd 51:30.510 --> 51:34.620 you quickly shot that all son ali solicited and we are spending 51:34.650 --> 51:38.760 a lot of time working with the industry experts in how to do that. 51:39.860 --> 51:42.460 Thank you thank you very much like in the line shannon. 51:42.460 --> 51:47.290 Thank you for your uh expertise cinema acronyms of when now proceed 51:47.290 --> 51:49.520 to cover. So mightily symphonic of new york. 51:50.660 --> 51:55.150 Interested chairman my final question relates to um the personnel 51:55.150 --> 51:58.660 side of this issue. So one of the challenge is that I stink week 51:58.660 --> 52:02.100 really face is insuring that are cyber technical in workforce 52:02.100 --> 52:05.900 capabilities can scale economically and the Sydney begin issue. 52:05.900 --> 52:09.620 For the industry is the clearance process. Um is there any sought 52:09.690 --> 52:12.900 being given to an approach for fast tracking parents processing 52:12.900 --> 52:16.580 for critical skills position such as computer network operations 52:16.580 --> 52:20.000 programmers to better enable effective support as your mission 52:20.000 --> 52:21.270 requirements. Expand. 52:25.680 --> 52:28.940 We have a promise security flourishes across and protest across 52:28.940 --> 52:31.990 the industry and the problem with prioritizing it was how many 52:31.990 --> 52:35.290 competing priorities we can't so yes that would be a prayer it'd 52:35.290 --> 52:39.100 but I can't look across of our defenses say we don't have a dozen 52:39.100 --> 52:41.890 other prayer vis-a-vis what that that are better at least equal 52:41.890 --> 52:44.770 to that made the did member pryor's. We have is extraordinary 52:44.770 --> 52:49.370 to security fence problem is a problem not only for I T professionals 52:49.370 --> 52:52.720 but also for of for for contractors for work and weapon systems. 52:52.970 --> 52:56.240 It's of it's a problem for the hiring process within the department fans. 52:56.690 --> 52:59.320 That's why we're gonna we're we're working to re engineer our 52:59.320 --> 53:02.350 internal cross season. Why we hope that we will we'll out today 53:02.490 --> 53:07.150 to a reader some of helped renewed fears some of the opium process 53:07.150 --> 53:10.730 eases as as well as with before with this uh one of the things 53:10.730 --> 53:14.920 that that we're very hopeful for to see it was I can T was evaluations 53:14.920 --> 53:17.970 a tool that will help speak. Well of speed things up and them 53:17.970 --> 53:22.160 over the burdens um but I'm gonna say right now we're running 53:22.160 --> 53:25.560 continuous evaluation as a pilot program which means we're running 53:25.560 --> 53:28.680 it in addition to all the other requirements and we're hoping 53:28.680 --> 53:31.160 that we can prove it out. So can be a substitute for some their 53:31.160 --> 53:35.010 crime a soap the next but we're not area a but this is it's it's 53:35.010 --> 53:37.820 a hard question not just the to syria and I'd. I don't think 53:37.820 --> 53:41.300 the department can afford to saw that by carting off one when 53:41.300 --> 53:43.450 universe intrigued him better because it of the universe is a 53:43.450 --> 53:46.460 people we need to get to this gritty parents process are are 53:46.600 --> 53:48.100 also vital to national security. 53:48.820 --> 53:50.120 You have a scene get anything to add. 53:51.190 --> 53:54.160 To mullasie peter. So little very well. Okay thank you very much 53:54.160 --> 53:54.920 ideal back. 53:55.550 --> 53:59.350 In thank you cuss. I'm mystified for your insight to a there 53:59.350 --> 54:02.710 being no further uh. We are a time. Yes..