FEDERALhearing transcript

Review of Federal Cybersecurity Programs

Original title: EVALUATING CISA'S FEDERAL CIVILIAN EXECUTIVE BRANCH CYBERSECURITY PROGRAMS

January 1, 2024

cybersecurity CISA federal infrastructure data protection government technology

Track this bill to get notified when it advances a stage. One tap to stop, anytime.

The Frame

What this does

This hearing examines the security of federal civilian agency networks, which store sensitive government and citizen data, to determine if current CISA programs are effectively defending against modern cyber threats.

Who is mentioned in the record

Potentially affected actors named in the source documents. Mention is not a position.

Federal Civilian Executive Branch (FCEB) agencies

These agencies are the primary users of the CDM and NCPS programs for their network security.

CISA

The agency is responsible for managing the programs under review and implementing potential future improvements.

What changed

Last recorded activity January 1, 2024.

What's next

Next step not available in the current record.

Summary

The House Subcommittee on Cybersecurity and Infrastructure Protection held a hearing to evaluate two major cybersecurity programs managed by the Cybersecurity and Infrastructure Security Agency (CISA). The hearing focused on the effectiveness and potential improvements for the Continuous Diagnostic and Mitigation () program and the National Cybersecurity Protection System (), which includes the EINSTEIN system.

Key Facts

The hearing was held on September 19, 2023, by the Subcommittee on Cybersecurity and Infrastructure Protection.
The primary focus was the evaluation of CISA's Federal Civilian Executive Branch (FCEB) cybersecurity programs.
The two specific programs under review were the Continuous Diagnostic and Mitigation (CDM) program and the National Cybersecurity Protection System (NCPS).
The NCPS program includes the EINSTEIN system, which is used for federal network protection.
The CDM program provides tools for agencies to defend networks and feeds data into dashboards for real-time security monitoring.
CISA has expressed an intent to revamp and improve both the CDM and NCPS programs.

Why It Matters

Frequently Asked Questions

What is the CDM program?

The Continuous Diagnostic and Mitigation () program provides tools to federal agencies to help them defend their networks and monitor their security status in real-time.

What is the EINSTEIN system?

EINSTEIN is a component of the National Cybersecurity Protection System () used by CISA to help protect federal civilian executive branch networks.

News Coverage

No news coverage found yet. Articles are indexed twice daily.

Discoveries

Patterns POLISCOPE noticed across the record. These are observations to investigate, not conclusions.

policy shift90% confidence

CISA Program Modernization

CISA has explicitly signaled an intent to revamp its two flagship cybersecurity programs, indicating a shift toward modernization.

CISA

Connected Entities

personJoe Head“Chief Technology Officer of Intrusion, witness at the hearing.”Map →

personAndrew R. Garbarino“Chairman of the Subcommittee on Cybersecurity and Infrastructure Protection.”Map →

personBrian Gumbel“President of Armis, Inc., witness at the hearing.”Map →

personRob Sheldon“Senior Director at CrowdStrike, witness at the hearing.”Map →

organizationCISA“Cybersecurity and Infrastructure Security Agency, the subject of the oversight h”Map →

personStephen Zakowicz“Vice President of CGI Federal, Inc., witness at the hearing.”Map →

Sources

Open source document

www.govinfo.gov

Analysis Score

0–100

Significance60
How much this matters to a regular citizen
Controversy10
Intensity of disagreement among stakeholders
Entertainment5
Compellingness for a non-policy-wonk reader
Buzz15
Current news / social attention level

Publisher tools