Facing evolving and growing cybersecurity threats, government agencies have historically tried to achieve three key goals: shared situational awareness across federal networks, a Common Operating Picture of threats, and the ability to respond at machine speed. Key factors that impede these efforts were stovepipes between agency cybersecurity centers and the number of cybersecurity solutions and tools agencies had acquired that required manual/human integration because they were not interoperable. In contrast, the private sector has overcome many of these obstacles.

This session will share the key observations on the intersection of cybersecurity in government and industry from the perspective of a former senior government official who will address: What key aspects of cybersecurity does the private sector tend to misunderstand that make sense to government – and vice versa? Are we on the verge of a revolution that will tip the balance between malicious actors and cyber defenders? Why is generating useful measures of cyber performance so difficult, and what can we do to improve it?