Thread by @ericgeller

The Senate Homeland Security Committee has begun its confirmation hearing for Biden DHS Secretary nominee @AliMayorkas.

Watch here: c-span.org/video/?507947-…

I'll tweet cyber highlights.

Portman kicks things off by reading from DHS IG report about Mayorkas' alleged EB-5 favoritism during the Obama admin. He says it's important that Mayorkas have a chance to respond.

“I believe this hearing is about ensuring strong, effective, and ethical leadership" of DHS.

Peters to Mayorkas: “Once confirmed, you will have a daunting job before you. … There’s no question we need strong and we need stable leadership in the Department of Homeland Security more than ever.”

Sorry, I should say: Peters is Sen. Gary Peters (D-Mich.), who will soon officially become the new chairman of HSGAC. Portman is Sen. Rob Portman (R-Ohio), who will be the ranking member. He takes over that role from Sen. Ron Johnson (R-Wisc.).

Mayorkas, in his opening statement, cites "cyberattacks that undermine our security and the integrity of our information systems" among the threats that DHS must confront.

As I predicted in today's @MorningCybersec, Mayorkas hammers home need for partnerships in cyber.

Says DHS is "fundamentally a department of partnerships.”

“To enhance our cybersecurity, the department depends upon and must strengthen our cooperation with the private sector.”

Cyber partnerships were a key priority for Mayorkas when he was DHS's deputy secretary. He worried that companies weren't sharing enough cyber threat information with the government and looked for ways to incentivize them.

First cyber question, from Sen. Kyrsten Sinema (D-Ariz.): Will you work with us to enhance cybersecurity education to help defend against ransomware?

Mayorkas: Yes.

Romney: “We are woefully unprepared from a cybersecurity standpoint in this nation and in our government, and [I] hope that … you will focus on bringing a whole different level of expertise..." (1/2)

(2/2) "...both in defensive actions with regards to cybersecurity and offensive actions, and protect our government and our economy from those who would attack us in this new, most powerful way."

Mayorkas: “I was incredibly proud to be the deputy to Secretary Johnson,” who “prioritized a very evolving cybersecurity threat, and we made tremendous advances in the department under his ultimate leadership." (1/2)

(2/2) "The threat has only evolved and only grown since then, and I can assure you that the cybersecurity of our nation will be one of our highest priorities. … The threat is real, and the threat is everyday, and we have to do a much better job than we are doing now."

Sen. Maggie Hassan (D-N.H.): Any thoughts on whether CISA's EINSTEIN and CDM programs need changes since they failed to spot SolarWinds?

Mayorkas says that if confirmed, he will study U.S. intelligence on SolarWinds and examine whether to change EINSTEIN/CDM or add new programs.

Mayorkas' full answer: "I look forward to studying the SolarWinds attack. Of course, I’ve been studying it intensely as a private citizen. Should I have the privilege of serving as the secretary, I will avail myself of the best and latest intelligence..." (1/?)

"...that the United States has with respect to this attack and conducting a thorough review of EINSTEIN and Continuous Diagnostics and Mitigation to understand whether EINSTEIN and CDM … are appropriately designed and appropriately and effectively executed..." (2/?)

(3/3) "to stop a threat such as SolarWinds, and if not, what other defenses need we develop in the federal government to best protect our very valuable equities and resources?"

If I understand correctly, Mayorkas hasn't been in any of the Biden transition team briefings on SW.

Hassan also asked if Mayorkas supported a state and local govt cyber grant program, which she has proposed.

Mayorkas signals support and says "I look forward to working on it with you."

M: In cyber, "we often say that we are only as strong as our weakest link, & we have to recognize that there are local communities that don’t have the financial or other wherewithal to really safeguard their cyber assets & best protect against the threats that they confront.”

Sorry, corrected Mayorkas quote to Hassan about her grant program idea: "I look forward to considering a grant proposal and working with you in that regard."

Portman: CISA “has been stretched too thin," missed SW. What should CISA do going forward?

Mayorkas: CISA "must improve" govt cyber hygiene & improve public-private partnerships. Need a whole-of-govt approach & "there's great amount that will rest on the shoulders of CISA."

Portman: Are you committed to also strengthening DHS’s internal cybersecurity, as FISMA audits show is needed?

Mayorkas: “Absolutely, Mr. Chairman. We need to lead by example.”

Mayorkas' full answer on CISA.

Mayorkas' confirmation hearing has ended.