On the recordAugust 1, 2012
I mentioned, to use the Senator's words, it was important to help the private sector strengthen itself. Some of the debate that has surrounded this bill has suggested that if we just get the heavy hand of government out of the way and let the nimble private sector do its thing to protect critical infrastructure, all will be well, and that a purely private sector way of proceeding is the best way to proceed. In that context, the Senator mentioned the study that showed that only 13 percent of the private businesses that were reviewed were adequately cyber security prepared. The NCIJTF, which is the FBI-led joint task force that protects our national cyber infrastructure, has said that when they detect a cyber attack and they go out to work with the corporation that has been attacked, 9 out of 10 times the corporation had no idea. It is not just a government agency, the NCIJTF, saying that, there is a company called Mandiant which is sort of ``Who are you going to call? Ghost Busters.'' When someone is hit, they come in and help the companies clean up. They say the same thing: Out of 10 times, these companies had to find out that they had been penetrated from a government agency telling them, ``By the way, you have been hacked. They are in there.'' In fact, he said 48 out of the last 50 companies they dealt with had no idea. The Aurora virus hit 300 American companies, and only three of them knew it.…





