Tom Coburn

We are going to make that perfectly clear.

We passed the DATA Act out of here, and the thing that will not change is the requirement to know what you spent and where you spent it and be able to account for it.

Which is ridiculous.

IT is one of the areas where we waste more money than any other area in the government, except the Pentagon when you take IT out.

Of all the billions that we have wasted in IT, not once have I ever found where we went after the supplier for non-performance.

One of the reasons I am a big Jeh Johnson fan is I think he is a good manager.

This is the first hearing I have been to in a long time that, really, there are a whole lot more positives than there are negatives, and I congratulate you all on it.

There will be no insurance industry left in 3 years.

Private health insurance will be dead in 3 years.

The only way you are going to get it implemented is have some teeth in it, and the only organization that has teeth right now is OMB.

Well, that is the real answer, because as soon as--here is the problem.

But it is important that we get a bill that causes people to buy into what we need to do on a timely basis.

If we create the expectation in this country that if you are violating a network, you are going to get hammered.

It is ironic that we can, as a Congress, sit and tell people, here are the rules, and we cannot even manage our own backyard in terms of data breaches.

I would note, this is the fourth hearing on data breach in the Senate this year.

Had we started out CFATS with the framework that said we are going to bring all the industry together and say how do we best solve this problem--that is not what we did with CFATS.

We ought to be setting a good example on our own cyber within the government.

We do not trust them to do what is best for the country as a whole, and we think they are always self-centered.

One of the assumptions that has changed during my lifetime as a citizen of this country is the assumption in government that people are going to do something wrong rather than they are going to do something right.

As long as you can keep the voluntary compliance and working relationship on a basis of trust and value, we are not looking at hard regs mandated by the Federal Government.

To answer the Senator's question, I supported the Enzi amendment. I don't think it went far enough because you are not going to look at some of the programs that are outside the purview of the Senator's committee. We have eight different…

It is my feeling that we have an imbalance on how we treat the States on disasters.

To me that seems inherently unfair to the taxpayers of this country.

I have the same high regard for Administrator Fugate that you do.

I think it is more a State responsibility than it is a Federal responsibility.