[Congressional Record (Bound Edition), Volume 155 (2009), Part 19]
[House]
[Pages 25175-25178]
[From the U.S. Government Publishing Office, www.gpo.gov]




  RAISING AWARENESS AND ENHANCING THE STATE OF CYBER SECURITY IN THE 
                             UNITED STATES

  Mr. GORDON of Tennessee. Mr. Speaker, I move to suspend the rules and 
agree to the resolution (H. Res. 797) expressing the sense of Congress 
with respect to raising awareness and enhancing the state of cyber 
security in the United States, and supporting the goals and ideals of 
the sixth annual National Cyber Security Awareness Month.
  The Clerk read the title of the resolution.
  The text of the resolution is as follows:

                              H. Res. 797

       Whereas more than 220,000,000 American adults use the 
     Internet in the United States, 80 percent of whom connect 
     through broadband connections, to conduct business, 
     communicate with family and friends, manage finances and pay 
     bills, access educational opportunities, shop at home, 
     participate in online entertainment and games, and stay 
     informed of news and current events;
       Whereas nearly all United States small businesses, which 
     represent more than 99 percent of all United States employers 
     and employ more than 50 percent of the private workforce, 
     increasingly rely on the Internet to manage their businesses, 
     expand their customer reach, and enhance the management of 
     their supply chain;
       Whereas nearly 100 percent of public schools in the United 
     States have Internet access, with a significant percentage of 
     instructional rooms connected to the Internet to enhance 
     children's education by providing access to educational 
     online content and encouraging self-initiative to discover 
     research resources;
       Whereas approximately 93 percent of all teenagers use the 
     Internet;
       Whereas the number of children who connect to the Internet 
     at school continues to rise, and teaching children of all 
     ages to become good cyber-citizens through safe, secure, and 
     ethical online behaviors and practices is essential to 
     protect their computer systems and potentially their physical 
     safety;
       Whereas the growth and popularity of social networking 
     websites has attracted millions of Americans, providing 
     access to a range of valuable services, but exposing them to 
     potential threats like cyber bullies, predators, and identity 
     thieves;
       Whereas cyber security is a critical part of the Nation's 
     overall homeland security;
       Whereas the Nation's critical infrastructures and economy 
     rely on the secure and reliable operation of information 
     networks to support the Nation's financial services, energy, 
     telecommunications, transportation, health care, and 
     emergency response systems;
       Whereas cyber attacks have been attempted against the 
     Nation and the United States economy, and the Department of 
     Homeland Security's mission includes securing the homeland 
     against cyber terrorism and other attacks;
       Whereas Internet users and critical infrastructure owners 
     and operators face an increasing threat of criminal activity 
     and malicious attacks through viruses, worms, Trojans, and 
     unwanted programs such as spyware, adware, hacking tools, and 
     password stealers, that are frequent and fast in propagation, 
     are costly to repair, can cause extensive economic harm, and 
     can disable entire systems;
       Whereas coordination among the Federal Government, State, 
     local, and tribal governments, and the private sector is 
     essential to securing America's critical cyber 
     infrastructure;
       Whereas millions of records containing personally 
     identifiable information have been lost, stolen or breached, 
     threatening the security and financial well-being of United 
     States citizens;
       Whereas now more than ever before, consumers face 
     significant financial and personal privacy losses due to 
     identity theft and fraud;
       Whereas national organizations, policymakers, government 
     agencies, private sector companies, nonprofit institutions, 
     schools, academic organizations, consumers, and the media 
     recognize the need to increase awareness of cyber security 
     and the need for enhanced cyber security in the United 
     States;
       Whereas the Cyberspace Policy Review, published by the 
     White House in May 2009, recommends that the Federal 
     Government initiate a national public awareness and education 
     campaign to promote cyber security;
       Whereas the National Cyber Security Alliance's mission is 
     to increase awareness of cyber security practices and 
     technologies to home users, students, teachers, and small 
     businesses through educational activities, online resources 
     and checklists, and Public Service Announcements; and
       Whereas the National Cyber Security Alliance, the Multi-
     State Information Sharing and Analysis Center, and the 
     Department of Homeland Security have designated October as 
     National Cyber Security Awareness Month to provide an 
     opportunity to educate United States citizens about cyber 
     security: Now, therefore, be it
       Resolved, That the House of Representatives--
       (1) supports the goals and ideals of National Cyber 
     Security Awareness Month; and
       (2) intends to work with Federal agencies, national 
     organizations, businesses, and educational institutions to 
     encourage the development and implementation of existing and 
     future cyber security consensus standards,

[[Page 25176]]

     practices, and technologies in order to enhance the state of 
     cyber security in the United States.

  The SPEAKER pro tempore. Pursuant to the rule, the gentleman from 
Tennessee (Mr. Gordon) and the gentleman from Michigan (Mr. Ehlers) 
each will control 20 minutes.
  The Chair recognizes the gentleman from Tennessee.


                             General Leave

  Mr. GORDON of Tennessee. Mr. Speaker, I ask unanimous consent that 
all Members may have 5 legislative days to revise and extend their 
remarks and to include extraneous material on H. Res. 797, the 
resolution now under consideration.
  The SPEAKER pro tempore. Is there objection to the request of the 
gentleman from Tennessee?
  There was no objection.
  Mr. GORDON of Tennessee. Mr. Speaker, I yield myself such time as I 
may consume.
  Mr. Speaker, I rise in support of H. Res. 797, a resolution to 
applaud the goals and activities of the National Cyber Security 
Awareness Month. The Science and Technology Committee has been a leader 
in Congress supporting the efforts to promote better security and 
cybersecurity, and I am pleased to support this resolution and to help 
raise awareness of this critical issue.
  Each year, Americans become more and more dependent on technology for 
their daily lives. More than 200 million people in this country use the 
Internet for shopping, education, socializing, information gathering, 
banking and entertainment, and an increasing number of Internet users 
are children and seniors.
  Unfortunately, with this growth in use, we have also seen a startling 
increase in cybersecurity. Bank accounts are now being hacked; children 
are being bullied or harassed on social networking sites; and personal 
information is being stolen from relatives, retailers, universities, 
and even government agencies.
  For example, earlier this year, computer systems at the FAA were 
hacked, increasing the risk of large-scale commercial air traffic 
systems disruption.
  Improving cybersecurity will take the effort of all of the key 
stakeholders: Federal, State and local governments, academia, business 
and individuals.

                              {time}  1530

  We are all part of the user community and we each must do our part, 
from updating the Web browsers of our personal computers to improving 
the coordination of cybersecurity research investments across the 
public and private sectors. We need to change the way we think about 
cybersecurity and ensure it is built in from the beginning.
  Cybersecurity is a challenge that transcends borders. There are 1.7 
trillion Internet users worldwide, which means that we can only advance 
cybersecurity through increased international collaboration. That's why 
I join my colleagues in applauding the efforts of the National Cyber 
Security Alliance, a public-private partnership focused on improving 
cybersecurity for home users, small businesses, and education 
institutions.
  I want to thank my friend from New York (Ms. Clarke) for introducing 
this resolution and urge my colleagues to support it.
  I reserve the balance of my time.
  Mr. EHLERS. Mr. Speaker, I rise in support of H. Res. 797 and yield 
myself so much time as I may consume.
  It seems that nearly every facet of our lives, professional and 
personal, relies on computers and the Internet in some fashion--
communication, transportation, shopping, medicine, entertainment, and 
the list goes on. It is not an understatement to say that information 
technology has become one of the main components of our everyday 
American lives, and as such, we are left more and more vulnerable to 
cyberattacks, viruses, worms, and identity theft. As our Nation depends 
more heavily on this technology, both proactive and reactive 
cybersecurity are essential.
  In order to raise awareness of the importance of cybersecurity, the 
National Cyber Security Alliance has declared the month of October as 
Cyber Security Awareness Month. All month long, the NCSA is sponsoring 
events and programs to raise awareness of the importance of 
cybersecurity.
  The National Cyber Security Alliance is the preeminent public-private 
partnership, working with the Department of Homeland Security, 
corporate sponsors, and nonprofit collaborators to promote 
cybersecurity awareness for home users, small and medium size 
businesses, and primary and secondary education. We all have a role in 
sustaining our cyberinfrastructure, which is essentially this year's 
theme, ``Our Shared Responsibility.''
  The NCSA offers many tips for individuals and businesses alike to 
help protect themselves from cyberattacks. StaySafeOnline.org is a Web 
site created by the NCSA to provide education on all of the different 
aspects and issues related to cybersecurity. All of the organizations 
and agencies involved in National Cyber Security Awareness Month have 
put forth a great effort in raising awareness and helping us as 
Americans become better, more responsible computer users.
  I urge my colleagues to support H. Res. 797, and I reserve the 
balance of my time.
  Mr. GORDON of Tennessee. Mr. Speaker, I yield 5 minutes to the author 
of this resolution, the gentlewoman from New York (Ms. Clarke), and 
congratulate her on an outstanding hearing last Friday on this issue.
  Ms. CLARKE. Mr. Speaker, I am pleased to offer H. Res. 797, my 
resolution supporting the goals and ideals of National Cyber Security 
Awareness Month, for a vote today. I would like to thank Chairman Bart 
Gordon for giving me the opportunity to share with him and this 
committee the virtues of National Cyber Security Awareness Month.
  The goal of National Cyber Security Awareness Month is to heighten 
awareness of everyday Internet users and to explain that by taking some 
simple steps, we can all safeguard ourselves from the latest online 
threats and respond to potential cybercrimes against ourselves and our 
Nation.
  Each year, the National Cybersecurity Division (NCSD) of the 
Department of Homeland Security joins with the National Cyber Security 
Alliance (NCSA), the Multi-State Information Sharing and Analysis 
Center, and other partners to support National Cyber Security Awareness 
Month. I thank DHS Secretary Janet Napolitano and Assistant Secretary 
Greg Schaffer as well as Will Pelgrin with MS-ISAC and Michael Kaiser 
with StaySafeOnline.org for their leadership in promoting National 
Cyber Security Awareness Month.
  This year, the theme of National Cyber Security Awareness Month is 
``Our Shared Responsibility.'' Ultimately, our cyberinfrastructure is 
only as strong as its weakest link. In this digital age, we are all 
connected. No individual, business, or government entity is solely 
responsible for cybersecurity. We all must understand how our 
individual online computing practices have a collective impact on our 
Nation's cybersecurity. It would be naive to believe, however, that 
simple steps by end users alone will sufficiently combat the larger 
threats associated with a growing networked society.
  As chairwoman of the Homeland Security Subcommittee on Emerging 
Threats, Cybersecurity, and Science and Technology, I have held three 
hearings this year on our Nation's cybersecurity posture. Cybersecurity 
vulnerabilities can and have significantly impacted our national and 
economic security. Through the leadership of the Obama administration, 
cybersecurity is finally gaining the much-needed attention it deserves, 
both in the Federal Government and the private sector. The oversight 
that the Homeland Security Committee is undertaking will help to focus 
our attention; however, much more work remains to be done.
  Last week, I held a roundtable discussion with key cybersecurity 
stakeholders in Congress, the administration, and the private sector on 
this extremely complex issue. Everyone agreed that end user awareness 
and

[[Page 25177]]

education is an extremely critical component to fortifying our national 
cybersecurity posture. More and more and with each passing moment, we 
are awakening to the vulnerabilities and threats that come from our 
interactions on the World Wide Web. Simply put, we must protect 
ourselves. That is why this resolution received overwhelming bipartisan 
support.
  I thank my colleagues, especially Chairman Gordon, for cosponsoring 
H. Res. 797, and I look forward to working with him as well as other 
committees of cross jurisdiction on this critical issue going forward.
  Mr. EHLERS. Mr. Speaker, if the majority has no additional speakers, 
then I will proceed to close.
  We have had a lot of good discussion here about cybersecurity, but a 
word that hasn't popped up as much is cyberwarfare, and that is by far 
the most dangerous situation facing our Nation today.
  Cybersecurity is indeed a major issue and we need protection from 
thieves trying to steal our bank accounts, et cetera. But the real 
difficulty we face as a Nation occurs because we are so vulnerable. We 
are so advanced technologically, that we are vulnerable to attacks of 
all types from many enemies of different backgrounds and different 
abilities.
  It is a sad commentary today that a powerful, strong nation such as 
the United States of America can be the victim of a very small nation 
or even a small group of individuals seeking to do us harm using 
cyberwarfare. I myself did not realize the extent of this until some 
years ago. I was selected as a rapporteur of the NATO Parliamentary 
Assembly Science Committee to write a report on cyberwarfare; and it 
was simply astounding to learn the risks that we face as a wealthy, 
well-established, highly developed nation simply because we make such 
great use of cyberknowledge and cybertechniques that we are 
automatically very vulnerable in the area of cyberwarfare.
  I appreciate the gentlelady from New York bringing this to our 
attention. We have a lot of work to do here, not just in the military, 
but in many civilian sectors as well. The warning is here. The alarm 
has been rung. Let's make sure that, as a nation, we go ahead and 
defend ourselves as we should against this very, very highly 
technological but very dangerous new activity.
  With that, I yield back the balance of my time.
  Mr. THOMPSON of Mississippi. Mr. Speaker, I rise today in support of 
House Resolution 797, recognizing the goals and ideals of National 
Cybersecurity Awareness Month.
  The release of the Presidential Cyberspace Policy Review in May was 
an important step forward.
  However, more work remains to be done to ensure that cybersecurity is 
fully integrated into our nation's homeland security efforts.
  Our country can't afford 20th century thinking for a 21st century 
problem.
  I congratulate Ms. Clarke, the Chairwoman of the Subcommittee on 
Emerging Threats, Cybersecurity, and Science and Technology, for her 
work on cybersecurity, and thank her for authoring this resolution.
  The Committee has held ten hearings and undertaken numerous 
investigations into cybersecurity issues affecting the Federal 
government, the private sector, and critical infrastructure owners and 
operators in just the last three years.
  Though the Homeland Security Committee is primarily concerned with 
cybersecurity on Federal networks and critical infrastructure, we 
recognize the important education mission carried out by the National 
Cyber Security Alliance and their efforts to reach home users, small 
businesses, and students and educators of all ages.
  The National Cyber Security Alliance's mission is to increase 
awareness of cyber security practices and technologies to these folks 
through educational activities, online resources and checklists.
  Raising the awareness of this issue in both the public and private 
sectors is absolutely vital as our country becomes increasingly 
connected.
  Cybercrime is a serious business--recent reports suggest that cyber-
crime has become a $105 billion business that now surpasses the value 
of the illegal drug trade worldwide.
  During the past two years, one in five online consumers has been a 
victim of cybercrime.
  But companies and consumers continue to underestimate the threat from 
phishing, data loss, and other cyber vulnerabilities.
  I encourage my colleagues today to support this resolution and join 
me and Representative Clarke in our efforts to address this threat to 
our economy and homeland security.
  Ms. RICHARDSON. Mr. Speaker, as a member of the Homeland Security 
Committee, a member of the Subcommittee on Emerging Threats, Cyber 
Security, and Science and Technology, and a co-sponsor of this 
legislation, I rise in strong support of H. Res. 797, the ``National 
Cyber Security Awareness Month Resolution.'' October is National Cyber 
Security Awareness Month, and in this digital age when so much of our 
country's economic and financial transactions are conducted in 
cyberspace over distributed computing networks, there are few higher 
priorities than cyber security.
  Mr. Speaker, I thank Yvette Clark, the gentle lady from New York and 
Chair of the Subcommittee on Emerging Threats, Cyber Security, and 
Science and Technology, for her leadership and vision in recognizing 
the importance of cyber security in our overall national security. I 
could not agree more with Congresswoman Clarke that it is not enough to 
just acknowledge the importance of this issue. In this digital age, we 
must work with federal agencies, national organizations, businesses, 
and educational institutions to strengthen existing security measures 
and to develop new methods to enhance the cyber security of the United 
States.
  The tragedy of September 11th shook our national security like no 
event before or since. Although our Nation has remained safe and secure 
from physical attacks during the eight years since that terrible day, 
in this digital age we must remain vigilant against a possible 
terrorist attack on our cyber networks.
  Such an attack could have devastating and immediate consequences for 
our nation and all of our citizens; funds could not be accessed from 
ATMs; mail service would be interrupted; the efficient movement of 
goods would be severely curtailed; capital markets could be shut down; 
and emergency response operations would be deprived of the information 
needed to save lives and property.
  While this doomsday scenario has been the subject of the silver 
screen in recent years (e.g., ``Die Hard or Live Free,'' ``Eagle 
Eye''), make no mistake--the danger is very real and we ignore or 
minimize it at our peril. Many nations, including Russia, China, and 
North Korea, already possess the capability to launch cyber attacks 
against unprepared adversaries or competitors. And terrorist groups 
like al Qaeda are working round the clock to acquire this capability. 
Clearly, the United States must be proactive if we are to secure the 
physical and cyber networks of our country.
  That is why I am also an original co-sponsor of H.R. 2195, the 
``Critical Electric Infrastructure Protection Act.'' Among other 
things, this legislation provides the Federal Energy Regulatory 
Commission the authority to create mandatory physical and cyber 
security standards for the electric power system. I look forward to the 
day when the Homeland Security Committee reports this legislation 
favorably to the House.
  But today, I am very proud to stand with Chairwoman Clarke in support 
of H. Res. 797, which is a clarion call to action to secure our 
nation's cyber networks. I urge all Members to join with me in voting 
for this resolution.
  Mr. GORDON of Tennessee. Mr. Speaker, I yield myself such time as I 
may consume.
  In conclusion, I want to once again thank the gentlewoman from New 
York for bringing this important resolution to us. I think that this 
will help give our country a better awareness of the concerns we have 
about cybersecurity.
  Also, as Dr. Ehlers notes, our Science and Technology Committee has 
spent quite a bit of time on this issue, being the first to have a 
review of the 60-day review. Hopefully, we are going to be seeing in 
the next very few days a significant bill coming out of our committee 
concerning the necessary research and technology aspect of moving 
forward with our research in the cybersecurity area.
  Mr. Speaker, I yield back the balance of my time.
  The SPEAKER pro tempore. The question is on the motion offered by the 
gentleman from Tennessee (Mr. Gordon) that the House suspend the rules 
and agree to the resolution, H. Res. 797.
  The question was taken.
  The SPEAKER pro tempore. In the opinion of the Chair, two-thirds 
being in the affirmative, the ayes have it.

[[Page 25178]]


  Mr. GORDON of Tennessee. Mr. Speaker, I object to the vote on the 
ground that a quorum is not present and make the point of order that a 
quorum is not present.
  The SPEAKER pro tempore. Pursuant to clause 8 of rule XX and the 
Chair's prior announcement, further proceedings on this motion will be 
postponed.
  The point of no quorum is considered withdrawn.

                          ____________________