Ratcliffe speech on the Advancing Cybersecurity Diagnostics and Mitigation Act

Thank you, Mr. Speaker. Earlier this year, the Office of Management and Budget and the Department of Homeland Security released a report on the cybersecurity risks faced by federal agencies. Among the findings of that report was that almost 75 percent of our federal agencies are vulnerable to cyber threats, in large part due to their inability to understand cybersecurity risks and, therefore, to properly prioritize resources. Mr. Speaker, it's statistics like this that should make the state of our nation's cyber readiness and resilience deeply troubling to all of us, and it's one of the main reasons that DHS's Continuous Diagnostics and Mitigation, or CDM, program has been one of my top priorities during my time as chairman of the Cybersecurity and Infrastructure Protection Subcommittee. That's because CDM has the potential to provide solutions to this problem by dramatically increasing visibility across federal networks, thereby dramatically improving the ability of DHS, OMB, and agency security officers to better understand the technology assets being utilized across their agencies. Mr. Speaker, at the end of the day, looking across all networks and systems the federal government owns and operates, it comes down to fingers on government keyboards, whether they be laptops or desktops, tablets, servers, or in data centers. We need to know what we have before we can try and defend it. That's why the CDM program is so crucial to the cybersecurity posture of our federal government. Through its phased rollout, CDM requires DHS to provide agencies with the capabilities to collect the cybersecurity risk information necessary to make better decisions. It not only allows the ability to combat our enemies in cyberspace, but also to help federal CIOs manage information technology. The security data that CDM capabilities and tools collect will help federal CIOs and DHS make smarter choices about where taxpayer dollars are going and understand some of the most basic questions that a cybersecurity faces, including what devices are on the network. Mr. Speaker, HR 6443 is necessary to codify the CDM program at DHS and ensure that these authorities will exist to allow the continued progress of this very essential cybersecurity program. Making sure that federal agencies have access to the tools and capabilities they need to defend their networks and getting DHS the data to understand cybersecurity risks and vulnerabilities and to coordinate our federal network defenses are paramount concerns in this technological age. My goal and the goal of the bipartisan group of co-sponsors supporting HR 6443 is to help boost the long-term success of the CDM program. This bill also ensures that this program keeps pace with the cutting-edge capabilities being developed in the private sector, thereby avoiding the type of vendor lock that has previously been a problem. In that way, this bill ensures that we'll be modernizing and updating our systems before they become legacy technologies, unsupported by vendors, and at even greater risk of being exploited by our digital adversaries. It is DHS's CDM program that will help federal agencies and the whole of federal government to understand the threats they face and the risks that these vulnerabilities pose in real time. Authorizing the CDM program will further DHS's role in the cybersecurity mission throughout our government and will continue to strengthen and elevate this important program. I therefore urge my colleagues to support this bill and I reserve the balance of my time.