April 15, 2016

Memorandum
TO:

Members of Committee on Oversight and Government Reform

FROM:

Jason Chaffetz, Chairman

SUBJECT:

Subcommittee on Information Technology (IT) hearing titled, Federal

Cybersecurity Detection, Response, and Mitigation.

On Wednesday, April 20, 2016, at 9:30 a.m. in room 2154 Rayburn House Office
Building, the IT Subcommittee will hold a hearing titled, Federal Cybersecurity Detection,
Response, and Mitigation. The hearing will examine issues related to federal agencies
capabilities and procedures to detect and mitigate cybersecurity vulnerabilities.

Background
Increasing use of common and shared hardware, software, and information infrastructure across
the federal government can increase the likelihood that cybersecurity vulnerabilities will occur,
as well as the level of damage that could result if they are allowed to persist. In this
environment, a single vulnerability is not isolated to just one agency or executive department, but
has the potential to affect all. If not detected, communicated, and mitigated in a timely manner, a
systemic vulnerability could result in profound damage to government operations and national
security.
Recent media reports revealing security vulnerabilities in the Department of States Consular
Consolidated Database have raised new questions about the Departments cybersecurity posture
and information security procedures. Additionally, a vulnerability discovered in several
generations of the Juniper Networks software may have had the potential to affect a large
number of federal agencies. The Department of the Treasury was one of the agencies impacted
by this vulnerability and the Committee is interested in the scope and timeline of the
Departments response in mitigating this vulnerability.

Witnesses
Mr. Sanjeev Bhagowalia
Deputy Assistant Secretary for Information Systems &
Chief Information Officer
Department of the Treasury
Mr. Steven C. Taylor
Chief Information Security Officer
Department of State
Mr. Andy Ozment
Assistant Secretary for Cybersecurity & Communications
Department of Homeland Security
Mr. Richard Barger
Chief Intelligence Officer
ThreatConnect, Inc.
Mr. Charles Carmakal
Vice President
Mandiant Consulting

Staff Contact
Please contact Mike Flynn, Sean Brebbia, or John Costello of the Majority staff at (202)
225-5074 with any questions.