Recovery from cyberattacks is where the government most needs improvement, said Trevor Rudolph, Chief of the Office of Management and Budget's Cyber and National Security Unit.

"We've spent so much time, resources and money on protecting assets and detecting threats, and now that we know the threats are in our system, we spend a lot of money responding to them," he said, speaking as part of a panel at CyberCon2015. "We're at a point where we're really good at protecting and detecting, and we're getting good at responding, but we have not gotten really good at the recover piece."

Part of the problem, he said, is that "recover" is not well-defined. Just what does it mean to recover? Reconstituting systems and processes? Notifying victims?

Like the other aspects, though, he said the government will get better with experience.

Get full CyberCon 2015 coverage.

Share:
In Other News
Load More