Congress has new appetite for breach law following SolarWinds hack
A senior Democratic lawmaker said there is a growing appetite for a new federal cybersecurity breach notification law in the wake of a sprawling series of digital intrusions blamed on the Russian government.
The comment, made by Mississippi Representative Bennie Thompson, the chairman of the House’s Homeland Security Committee, comes as cybersecurity executives are facing their second round of congressional questions on Friday over their companies’ roles in the breach centered on Texas software company SolarWinds.
Introducing the witnesses, Thompson said that there was “growing interest in a cybersecurity reporting law” from his colleagues and that he hoped “we can enact cyber incident notification legislation in the short order.”
What such a law might look like was not yet clear.
State and federal rules already compel organizations to notify the public in cases where health information or financial institutions’ data has been compromised, but companies are generally free to keep quiet about more traditional forms of cyberespionage - something Microsoft Corp President Brad Smith said was hobbling the fight against foreign hackers.
“A lot of companies choose to say as little as possible and often that’s nothing,” Smith told lawmakers.
“Silence is not going to make this country stronger. So I think we have to encourage - and I think even mandate - that certain companies do this kind of reporting.”
Testifying alongside Smith on Friday were SolarWinds Chief Executive Sudhakar Ramakrishna and FireEye Inc Chief Executive Kevin Mandia.
Their appearance before the joint hearing of the House Committees on Oversight and Reform and Homeland Security comes three days after the trio testified before U.S. senators over the massive breach, which has ensnared nine American government agencies and more than 100 other organizations.
Former SolarWinds Chief Executive Kevin Thompson, who stepped down shortly before the breach was announced, was also testifying on Friday.
Introducing the witnesses, Thompson said that there was “growing interest in a cybersecurity reporting law” from his colleagues and that he hoped “we can enact cyber incident notification legislation in the short order.”
What such a law might look like was not yet clear.
State and federal rules already compel organizations to notify the public in cases where health information or financial institutions’ data has been compromised, but companies are generally free to keep quiet about more traditional forms of cyberespionage - something Microsoft Corp President Brad Smith said was hobbling the fight against foreign hackers.
“A lot of companies choose to say as little as possible and often that’s nothing,” Smith told lawmakers.
“Silence is not going to make this country stronger. So I think we have to encourage - and I think even mandate - that certain companies do this kind of reporting.”
Testifying alongside Smith on Friday were SolarWinds Chief Executive Sudhakar Ramakrishna and FireEye Inc Chief Executive Kevin Mandia.
Their appearance before the joint hearing of the House Committees on Oversight and Reform and Homeland Security comes three days after the trio testified before U.S. senators over the massive breach, which has ensnared nine American government agencies and more than 100 other organizations.
Former SolarWinds Chief Executive Kevin Thompson, who stepped down shortly before the breach was announced, was also testifying on Friday.
AI Disclaimer: An advanced artificial intelligence (AI) system generated the content of this page on its own. This innovative technology conducts extensive research from a variety of reliable sources, performs rigorous fact-checking and verification, cleans up and balances biased or manipulated content, and presents a minimal factual summary that is just enough yet essential for you to function as an informed and educated citizen. Please keep in mind, however, that this system is an evolving technology, and as a result, the article may contain accidental inaccuracies or errors. We urge you to help us improve our site by reporting any inaccuracies you find using the "Contact Us" link at the bottom of this page. Your helpful feedback helps us improve our system and deliver more precise content. When you find an article of interest here, please look for the full and extensive coverage of this topic in traditional news sources, as they are written by professional journalists that we try to support, not replace. We appreciate your understanding and assistance.
