Co-Director, International Cyber Center BiographyAndy Purdy, an attorney and Certified Information Systems Security Professional, is Co-Director of the International Cyber Center at George Mason University, Fairfax, Virginia. Andy was a member of the White House staff team that helped to draft the U.S. National Strategy to Secure Cyberspace (2003). Shortly after its release by President Bush in February 2003, Andy went to the Department of Homeland Security to serve on the tiger team that helped to form the National Cyber Security Division (NCSD) and the U.S. Computer Emergency Readiness Team (US-CERT). Andy worked at DHS for three and a half years, the last two heading the NCSD and US-CERT, in a capacity that has been referred to as the “Cyber Czar” of the U.S. In 2006, he completed service as a Special Government Employee on the Defense Science Board Task Force on Mission Impact of Foreign Influence on DoD Software. Andy is also President of DRA Enterprises, Inc. (www.andypurdy.com), specializing in IT consulting, business development, and government relations. He is also a partner with the law firm of Allenbaugh Samini Gosheh, LLP (www.alsalaw.com), with offices in Irvine, California and Washington, DC. AbstractToward a Strategic Approach to National ICT Risk -- a Perspective from the US This session will outline a nationally coordinated, strategic approach to preventing, deterring, and mitgating successful cyber attacks. This approach envisions a public-private collaboration framework – nationally and internationally -- that informs and addresses requirements related to the assessment and mitigation of cyber risk, preparedness, malicious activity/cyber crime, and research and development. The session will promote thinking and discussion about the lessons that should be learned from the cyber wars; about how governments and global companies could work together to enhance national preparedness and cyber risk management, and improve the strategic approach, of major international players, all levels of government within nations, including law enforcement, of the owners and operators of the critical infrastructure, and other major institutions in our society. Critical to this thinking is the importance of stakeholder engagement to identify cyber priorities and requirements for action that can be made more transparent, resourced, and tracked, to promote goal-oriented, stakeholder collaboration and information sharing and accountability. |