If I were the CEO of Sony Pictures Entertainment I would simply Google "[first name] [last name] podcast" for every person applying to host one of my most lucrative properties
if I am ever a candidate for a very important job you will all learn about the @HothTakes episode where @Grace_Segers hoodwinked me into saying that Attack of the Clones has redeeming qualities
β’ β’ β’
Missing some Tweet in this thread? You can try to
force a refresh
Scoop: Senate HSGAC is working on a bill that combines the House's industry-friendly cyber incident reporting legislation w/ a bunch of programs to tackle ransomware.
Raises Qs about what happens to Warner/Rubio/Collins bill, which industry doesn't like.
* The House Homeland incident reporting legislation, with some tweaks and additions
* "Due diligence requirement" for companies facing ransom demands
* Ransomware task force
* "Ransomware vulnerability warning pilot program"
Due diligence req:
Before paying a ransom, a company would have to determine whether it could recover from the attack βthrough other means,β including by seeing if experts have published a decryption tool that works for them.
Neuberger: "We want to take a moment to encourage organizations to be on guard for malicious cyber activity in advance of the holiday weekend. To be clear, we have no specific threat information or information regarding attacks this weekend, but what we do have is history."
Neuberger notes that history shows that hackers often target companies over holiday weekends, when security operations centers may be understaffed or otherwise unprepared.
The House Homeland Security Committee is about to start a hearing with industry representatives testifying about its draft cyber incident reporting bill.
As I've noted, the latest draft of the House bill pares back some of the language to accommodate industry concerns. For example, it now says CISA can't require reporting any sooner than 72 hours after an incident.
Industry witnesses will implicitly criticize the Senate bill.
BPI: 24-hr reporting deadline "would distract from critical work" & lead to "premature and likely erroneous" reports homeland.house.gov/imo/media/doc/β¦
Embargo has lifted on WH cyber meeting announcements.
* Microsoft: offering $150m worth of security help to govt agencies
* Google: donating $100m to help orgs that secure open-source software
* Amazon: free security tokens for AWS users
* IBM: cyber training for 150k people
Other announcements from these companies:
* Google promising to connect 100k Americans w/ its free IT certificate programs & boost 10m Americans' digital literacy
* Amazon publishing its employee cyber training curricula
* IBM partnering w/ HBCUs on career development
IBM's CEO also called for public companies to formally report on their cybersecurity practices in the same way that many of them currently report on their environmental footprints and social responsibility programs.
Biden: βWe've seen time and again how the technologies we rely on, from our cell phones to pipelines to the electric grid, can become targets of hackers and criminals. But at the same time, our skilled cybersecurity workforce is not growing fast enough keep pace.β
1. Opening discussion with POTUS 2. Three breakout sessions led by senior officials (see next tweet) 3. Concluding discussion led by National Cyber Director Chris Inglis and NSC's Anne Neuberger
Breakouts:
1. Critical infrastructure resilience, led by @SecMayorkas & @SecGranholm, w/ energy, water & financial cos.
2. Building "enduring" cybersecurity, led by @SecRaimondo & @SBAIsabel, w/ tech & insurance cos.
3. Cyber workforce, led by Inglis, w/ education leaders.