Cybersecurity

The private-sector focus of the Pentagon's annual cyber exercise

Shutterstock image.

An annual cyber defense exercise held last month by the departments of Defense and Homeland Security and the FBI simulated a “whole-of-nation response” to attacks on critical infrastructure, with an emphasis on the private sector, where most of the potential targets reside.

The exercise held at a Joint Staff J-7 facility in Suffolk, Va., from June 8 to June 26 had more than 1,000 participants from over 100 organizations, including information-sharing hubs for the electric and financial sectors. All five military services, including National Guard and Reserve units, took part, as did the Federal Aviation Administration, according to a U.S. Cyber Command statement.

“Most critical infrastructure in the United States, particularly in the information technology area, is owned by the private sector,” said Rear Adm. Kevin Lunday, Cyber Command’s director of training and exercises, according to the Pentagon’s official news service. “So we rely on them, particularly when we are responding to a major incident or attack on the private sector.”

National Security Agency Director Adm. Michael Rogers, who heads Cyber Command, said the exercise was an opportunity to practice inter-service and inter-agency coordination. “Cyber Guard is designed to exercise the interface between the Department of Defense -- the active and Reserve and Guard components -- that are focused on the cyber mission, and to partner with other elements of the U.S. government as well as state and local authorities,” he said. A more detailed list of federal participants can be found here. The list does not name private firms that participated, and a Cyber Command spokesperson could not be reached for comment.

The Cyber Command statement referenced the participation of “allied partners,” and that included British officials, according to a Wall Street Journal report. British participation makes sense in light of deepening bilateral cooperation in the field.

Jim Penrose, a former senior NSA official who has participated in Pentagon cyber drills, said the exercises were crucial in helping identify cyber vulnerabilities in advance of a real-world incident because “once those cyber bullets are flying, all bets are off.”

By involving critical-infrastructure firms in the exercises, federal officials are “going to the next level … when it comes to cyber readiness,” said Penrose, who is now an executive vice president at cybersecurity firm Darktrace. Involving private-sector executives in the exercises also encourages them to share the latest cybersecurity best practices with their boardrooms, he added.

About the Author

Sean Lyngaas is an FCW staff writer covering defense, cybersecurity and intelligence issues. Prior to joining FCW, he was a reporter and editor at Smart Grid Today, where he covered everything from cyber vulnerabilities in the U.S. electric grid to the national energy policies of Britain and Mexico. His reporting on a range of global issues has appeared in publications such as The Atlantic, The Economist, The Washington Diplomat and The Washington Post.

Lyngaas is an active member of the National Press Club, where he served as chairman of the Young Members Committee. He earned his M.A. in international affairs from The Fletcher School of Law and Diplomacy at Tufts University, and his B.A. in public policy from Duke University.

Click here for previous articles by Lyngaas, or connect with him on Twitter: @snlyngaas.


Featured

  • Cybersecurity

    DHS floats 'collective defense' model for cybersecurity

    Homeland Security Secretary Kirstjen Nielsen wants her department to have a more direct role in defending the private sector and critical infrastructure entities from cyberthreats.

  • Defense
    Defense Secretary James Mattis testifies at an April 12 hearing of the House Armed Services Committee.

    Mattis: Cloud deal not tailored for Amazon

    On Capitol Hill, Defense Secretary Jim Mattis sought to quell "rumors" that the Pentagon's planned single-award cloud acquisition was designed with Amazon Web Services in mind.

  • Census
    shutterstock image

    2020 Census to include citizenship question

    The Department of Commerce is breaking with recent practice and restoring a question about respondent citizenship last used in 1950, despite being urged not to by former Census directors and outside experts.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.