DoD Nominee Katherine Sutton on the Severity of Cyber Threats to the US

The Escalating Cyber Threat Landscape

• ⚠️ Cyber threats are currently at a severe level, impacting both government institutions and the private sector, though the public may not fully grasp the extent of the danger.
• 🎯 The increasing reliance on internet-connected devices and military data connectivity expands the adversary's attack surface, with 85% of this surface residing in the private sector.
• 💡 The advent of technologies like generative AI has significantly lowered the barrier for adversaries to exploit system vulnerabilities.

Evolution of Cyber Defense and Deterrence

• 🚀 The threat landscape has evolved rapidly since the cyberspace solarium commission's recommendations, making the current situation more serious than just three years ago.
• 🛡️ The Department of Defense and federal government have enhanced their capabilities in defending forward and imposing costs on adversaries.
• 🤝 Lessons learned from the DoD, such as identifying malicious activity and malware, are being shared with the private industry to improve cybersecurity products nationwide.

Cyber in the Defense Industrial Base and Warfare

• 🏭 The defense industrial base, including thousands of supply chain contractors, is vulnerable, posing a serious problem for national cyber defenses, especially during conflict.
• ⚔️ Cyber warfare is expected to be a fundamental domain in any future conflicts, with activity often occurring below the threshold of armed conflict.

The Need for a Clear Cyber Deterrence Doctrine

• ⚖️ A clear doctrine of deterrence for cyber attacks is crucial, similar to nuclear deterrence, to signal that attacks will elicit a response, potentially not limited to cyber means.
• 🚫 The lack of a clear response to past incidents like the Sony hack and the "tool typhoon" indicates a lack of consequence for adversaries.
• 🗣️ There is a strong argument for establishing a serious and substantial cyber deterrent stated policy to ensure adversaries understand the risks.

Personnel and Strategic Challenges

• 🎯 Aligning personnel policy with national security and defense strategies is paramount to avoid gaps in trained and ready personnel.
• 📉 Restructuring the Pentagon, including potential staff reductions, must be handled in a thoughtful and systematic way to avoid damaging morale or undercutting the mission.