National cyber director doesn't envision industry doing offensive hacking
Briefly

National cyber director doesn't envision industry doing offensive hacking
"There's an enormous amount of capability on the private sector side. I'm not talking about private sector, industry or companies engaged in a cyber offensive campaign. I want to use the ability of our private sector to inform and share information so that the U.S. government can respond defensively or in a more agile way."
"Private-sector cyber firms provide myriad services like threat intelligence, defensive products and specialized hacking toolkits that are relied on heavily by U.S. government operators and analysts. But the government has not directed the private sector to directly carry out cyber intrusions or 'hack backs' against adversaries on its behalf."
"The private sector engagement hits on one of the cyber strategy's key pillars, which is focused on reshaping the behavior of foreign adversaries to disincentivize hacking. Cairncross said he wants various U.S. agencies - including non-cyber offices like the Departments of State and Commerce - to contribute to that goal."
National Cyber Director Sean Cairncross clarified that private sector companies will not engage in offensive cyber operations for the U.S. government, contrary to speculation following the Trump National Cyber Strategy release. Instead, the government intends to leverage private sector capabilities for threat intelligence, information sharing, and defensive responses. Private cyber firms already provide essential services including threat intelligence, defensive products, and specialized tools to government operators. The private sector engagement aligns with the cyber strategy's focus on deterring foreign adversaries through coordinated U.S. agency efforts, including non-cyber departments like State and Commerce. Government agencies including NSA, CIA, FBI, and Cyber Command retain their own legal authorities for offensive cyber operations against foreign threats.
Read at Nextgov.com
Unable to calculate read time
[
|
]