The president’s nominee to be the next director of the National Security Agency (NSA) told a Senate intelligence panel Thursday he would provide military cyber options to the president and Secretary of Defense needed to deter and improve the response to Russian election interference.
Lt. Gen. Paul Nakasone, commander of Army Cyber Command, testified before the Senate Intelligence Committee during his second confirmation hearing to assume the dual leadership role of NSA and Cyber Command, and affirmed he would assist in providing insight to address the lack of a cyber strategy for responding to information warfare.
“I recognize that our nation’s adversaries continue to pose threats and posture themselves to reduce our global advantage. In light of this, the importance of an effective National Security Agency continues to be paramount to our national defense,” Nakasone said during his opening remarks.
The president nominated Nakasone in February after the NSA and Cyber Command head, Adm. Mike Rogers, announced he would retire later this spring.
The Senate Armed Services Committee approved Nakasone’s nomination earlier in March, following a confirmation hearing where he testified that not enough has been done to deter Russian from continuing to interfere in U.S. elections (Defense Daily, March 1).
Lawmakers at Thursday’s hearing pushed Nakasone on his view regarding the need to create a cyber doctrine to address options for responding to information warfare against the U.S.
“We don’t have a clear and articulated cyber doctrine, at this point, that not only defends our government but deters near-peer adversaries,” said Sen. Mark Warner (D-Va.), committee vice chairman. “Our country, I believe, must develop a whole-of-government response to strengthen our defenses. I believe that we need a clearly articulated cyber doctrine that will deter nations, like Russia, from going after our critical institutions whether they be civilian, military or in the private sector.”
Warner pointed to a need for the executive branch to grant authorities to NSA and Cyber Command that would allow Nakasone, if confirmed, to deter the actions laid out in the intelligence community’s January 2017 report detailing Russia’s attempt to interfere in the 2016 presidential election
“I agree with the 2017 assessment. Unless [Russia’s] calculus changes, then we should expect continued issues,” Nakasone said. “Ultimately, I would anticipate a strategy such as this would come from the executive branch, perhaps the National Security Council. However, I would anticipate that all elements of the government would contribute to the strategy. I would provide my insights to both the Joint Staff and the Department of Defense as this strategy was developed.”
Sen. James Lankford (R-Okla.) expressed the committee’s frustration with a lack of direction to respond to information operations and who is recommending specific actions to the president.
Responding to Lankford, Nakasone that he would to take the lead with formulating military options for responding in cyberspace to deter nation-state adversaries.
“If confirmed, I would see that as my role as commander of U.S. Cyber Command to provide a series of options within cyberspace that the secretary of defense and the president could consider,” Nakasone said.
The committee is planning to hold a hearing next week on election security, according to Warner.
On Thursday, the Treasury Department announced new sanctions on 19 Russian individuals for their role in the Russian interference campaign.
Nakasone also detailed the role he would play in addressing nation-state threats to federal and private sector networks, with an aim to improve information sharing and ensure oversight of intelligence capability acquisition.
“The other area where I think you may have to look for an even more expansive role is the acquisition of signal and intelligence equipment by other agencies. I think you have a role to play there,” Sen. Roy Blunt (R-Mo.) said.
The Department of Homeland Security has taken steps to mitigate potential network exploitation by banning Russian software company Kaspersky Lab’s antivirus products from use on government networks. Nakasone affirmed his view that other nations could attempts to infiltrate systems through capabilities procured for intelligence activities.
“I certainly have concerns. I think the recent statements by the Department of Homeland Security and the directives with regards to select antivirus companies throughout the world, and the ensuing NDAA, that prohibited the use of select antivirus products within our government is very, very important for the future,” Nakasone said.
Responding to a question from Lankford on the importance of working with private sector entities to identify potential vulnerabilities, Nakasone said he would work to improve the flow of information sharing.
Nakasone said his collaboration priorities include more demand signals for areas NSA would like to explore with the private sector and growing the number of analysts to more rapidly process data provided by industry partners.
Referring to the ongoing discussion regarding the potential splitting of the dual-hat NSA and Cyber Command leadership role, Nakasone called the two positions “unique entities” and will have an assessment on the decision within his first 90 days.
“I’m not predisposed to whether that arrangement stays or ends,” Nakasone said.
The Senate Intelligence Committee has 30 days to report Nakasone’s nomination to the full Senate for a vote. Sen. Richard Burr (R-N.C.) said a committee vote will happen as soon as possible.
“I think you’re the right person at the right time,” Burr said.