News from the White House that a federal chief information security officer would be hired within three months likely spurred a collective cheer among some of the most innovative cyber minds. This is a good thing. Long overdue.<\/p>\n\n\n\n
But would any of them even qualify for the job?<\/p>\n\n\n\n\n\n
I ask not to discredit the effort by the Obama administration to draw from the Silicon Valley tech community. Amid the hype we’ve seen some success with that \u2013 federal offices are sprouting up out west, government executives are paying visits to companies like Google, and West Coast\u00a0transplants like Tony Scott and Megan Smith are actually shaping tech policy from the White House in a meaningful way.<\/p>\n\n\n\n
But there have been letdowns too. Ashkan Soltani, slated to join the White House Office of Science and Technology Policy as a senior adviser to chief technology officer Smith,\u00a0was not granted the necessary security clearance. We don’t know why. But it’s a shame. Sotani is an ideas guy \u2013 he proved that as chief technologist at the FTC, and even as an investigative reporter at the Wall Street Journal and Washington Post. Now he’s out.<\/p>\n\n\n\n\n\n
And the truth is that such challenges could only be more pronounced for a federal CISO, because of this inconvenient truth: some of the most qualified individuals honed their cyber skills engaging in activities that are less than legal. Federal CIO Tony Scott said as much, as reported by our own senior reporter Aaron Boyd shortly after his return from the Back Hat hacker conference: “In some cases, those folks, because of their background or past experiences just aren’t going to be eligible to be federal employees,” Scott said.<\/p>\n\n\n\n\n\n
I’m not advocating for criminal records or even risky behavior to be disregarded for the sake of government innovation. Nor am I claiming that the only qualified individuals for the job would be former hackers. I just wonder whether the pool of qualified applicants \u2013 qualified in terms of skills, but also\u00a0their ability to be hired\u00a0by White House standards \u2013 might prove a bit small. (Now, it’s very possible too that the administration already knows full well who they plan to hire. Even if that is the case, were they compelled to\u00a0eliminate\u00a0some interesting candidates along the way?)<\/p>\n\n\n\n
Five years ago I interviewed Marc Maiffret. He was a founder and CTO of cyber company eEye at the time, credited for discovering the first Microsoft computer worm Code Red, and someone who had testified before Congress about the cyber vulnerability of our nation’s critical infrastructure.\u00a0He was also\u00a0formerly known as “Chameleon,” “Rhino9” and “sn1per” \u2013\u00a0pseudonyms he used while breaking into some of the nation’s computer networks. \u00a0Who knows whether he’d ever get hired for a federal job. But as he put it to me then, the people from the security and research industries who are invited to brainstorm with the feds have worked on and off in D.C. for 10-plus years and are just as entrenched in the bureaucratic way of doing things.<\/p>\n\n\n\n
Again, that was five years ago. It’s better than it was. But my hope with this hire is that the\u00a0White House\u00a0remembers that government doesn’t need another cyber czar \u2013 an adviser on policy to respond to global cybersecurity risk. It has that. What government does need is a technologist. A coding genius. A person who can come up with a way to protect networks because he or show knows exactly how hackers would break in.<\/p>\n\n\n\n
And they just might know because they’ve tried it.<\/p>\n","protected":false},"excerpt":{"rendered":"
News of the planned hire presumably spurred a collective cheer among the most innovative cyber minds. But would any of them even qualify for the job?<\/p>\n","protected":false},"author":7,"featured_media":25467,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":15,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[15,26],"tags":[],"coauthors":[2503],"class_list":["post-18687","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-management","category-opinions"],"acf":{"subheadline":"","legacy_arc_id":"5ZEGVWSI6NEWDIBE2FBF5Q7JFQ","arc_canonical_url":"\/management\/2016\/02\/10\/the-hunt-for-a-ciso-a-white-house-hiring-quandary\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n