cupure logo
trumptrumpselectionhousetariffsukrainewargazawhitewoman

Cybersecurity's uneasy marriage with Washington gets tested

If the cybersecurity sector and government officials learned anything this week in San Francisco, it's that they're stuck with one another.But their uneasy marriage isn't guaranteed to stay intact.Why it matters: Tensions are high amid federal workforce layoffs, high-profile firings, contract cuts and rising partisan tensions.Many executives saw their meetings with government officials and political nominees at the RSA Conference this week — the cybersecurity industry's big annual gathering — as a test of whether their public-private partnerships will survive the new administration. The big picture: These partnerships were always a tough but essential balancing act.Companies have long feared retribution if they disclose security failures that let hackers in. They've also questioned the asymmetry of the relationship — sharing threat intelligence with the government and getting little in return.Yet each side sees different parts of the threat landscape: Companies face nation-state actors while helping customers, and governments exchange high-value intelligence with global partners.State of play: Under former President Biden, these partnerships were the strongest they've ever been — but still built on shaky ground.Recent cuts to federal contracts and advisory councils — plus the Justice Department's pending investigation into former CISA director Chris Krebs — have eroded trust."We've had very minimal collaboration, as much as we would like [to], with public sector," said Proofpoint CEO Sumit Dhawan during a panel Tuesday. "The partnership has been when something has [already] happened."Between the lines: The Trump administration's decision to attend RSAC signals they intend to maintain those partnerships, Brandon Wales, a former CISA official, told Axios. "We need to continue to mature what that relationship looks like," Wales added. "It shouldn't be static, because our adversaries are continuing to get better." Reality check: All the "easy" cyber policy issues are done, an industry source told Axios. What's left are the hard ones — like mandating secure-by-design rules for federal contractors and defining roles among overlapping cyber offices.What they're saying: Cybersecurity companies "know what they are doing when they see a new pattern develop … or something specifically designed to infiltrate our nation's security," Homeland Security Secretary Kristi Noem said during a keynote talk at RSAC on Tuesday. "They have to feel like they have the ability to communicate that with us," she added.Zoom in: Some cybersecurity executives are optimistic the administration will still strengthen ties with industry.Kevin Mandia, co-founder of Ballistic Ventures and founder of Mandiant, told Axios he's hopeful the administration will pursue new levers that can deter nation-state hackers."There's tremendous opportunities, and there always have been, to make it so that you don't get sucker-punched in cyberspace," he said.Yes, but: Cyber leaders are also going public with their concerns about CISA cuts and the Krebs investigation.Krebs, in his first public appearance since President Trump's order, said the public should be "absolutely outraged" by the cuts.Jen Easterly, his successor, said on a panel that "perhaps the new leadership in the Department [of Homeland Security] … has not had the opportunity to dig deep into the CISA statute."She added that Noem would likely find everything she wants CISA to do is "already being done."More than 40 cybersecurity professionals signed an open letter this week condemning Krebs' "political persecution."What to watch: Trump hates the term "private-public partnership," the industry source said — so even if the ties remain, the label may not.Go deeper: Cyber bipartisanship on the brink

Comments

World news