Russia's meddling in the U.S. presidential election and cyber security took center stage at several confirmation hearings for Donald Trump's cabinet nominees this week, with lawmakers from both parties raising questions about the government's efforts to counter aggression in cyber space.
Trump's choices to lead the Departments of Homeland Security, Defense, and State, as well as the CIA, all faced questions about Russian aggression, particularly in cyber space. Lawmakers also grilled cabinet nominees on their plans to develop a comprehensive cyber doctrine to deter and respond to cyber attacks.
The confirmation hearings took place in the days after the U.S. intelligence community published an unclassified report with its conclusions that Russia waged a multi-faceted campaign during the election to undermine American democracy and damage Democratic nominee Hillary Clinton.
Retired Marine Gen. John Kelly, Trump's choice for secretary of homeland security, said he accepted the conclusions of the intelligence community report on Russia's hacking "with high confidence" when questioned by the Senate Committee on Homeland Security and Government Affairs on Tuesday afternoon.
Rex Tillerson and Rep. Mike Pompeo (R., Kan.), Trump's selections for secretary of state and CIA director, respectively, both signaled their agreement with the intelligence community's conclusions during their own confirmation hearings later in the week.
Both President Obama and President-elect Trump were briefed on the investigation's findings last week. Trump was skeptical of the intelligence community's findings, prompting criticism from some lawmakers.
The Obama administration rolled out new sanctions on Russian individuals and entities and expelled suspected Russian spies from the United States in response to Moscow's election meddling in December, nearly three months after the intelligence community first accused Russia of directing hacks to influence the presidential race. A bipartisan group of lawmakers this past week unveiled sanctions legislation that would further punish Russia for its aggression.
Kelly said on Tuesday that he would like to see more cooperation between the private and government sectors on cyber security and focus on developing comprehensive cyber policy, noting that the United States faces "some pretty darn close-to-peer competitors" in the cyber realm.
The Department of Homeland Security is responsible for protecting critical infrastructure inside the United States and ensuring cyber security of the homeland. Some, including House Homeland Security Committee chair Rep. Michael McCaul (R., Texas), have called for the creation of an agency devoted to cyber security within the department.
The Pentagon has also been developing its own cyber capabilities as part of a cyber strategy, but faces "significant" cyber security challenges, according to the department's inspector general.
Retired Marine Gen. James Mattis, Trump's choice for defense secretary, told the Senate Committee on Armed Services on Thursday that he does not believe the U.S. military has a sophisticated, well-understood cyber doctrine. He underscored the need for the Pentagon to work with other agencies—including the Departments of Commerce, Treasury, and Homeland Security—to develop a comprehensive offensive and defensive cyber strategy.
"It is not something the military can do in isolation," Mattis said during his confirmation hearing. "This is going to require us to work with homeland security and a number of other government elements in order to make certain what we do in the military realm is connected to what they're doing in their realm because cyber cuts across everything we do today. You can't do something in isolation, and that slows down the process."
In prepared answers to advance questions from the committee, Mattis wrote that activities by America's adversaries in cyber space are "increasing in complexity, severity, and frequency" and are not being deterred.
"To be deterred, our adversaries must know they will suffer consequences from cyber attacks that outweigh any gains they hope to achieve," Mattis wrote. "If they choose to act as adversaries, we will treat them as such."
The U.S. intelligence community last Friday released the declassified version of its report detailing its conclusions about Moscow's cyber and disinformation campaign aimed at the 2016 election.
Days later, several of Trump's cabinet nominees made a point of singling out Russian aggression, even as the president-elect's own statements have indicated he would like to have a more positive relationship with Moscow.
On Thursday, Mattis underlined the threat posed by Russia, saying the United States needs to "recognize the reality" of Moscow's aggression in Europe and effort to "break" NATO. Mattis said that Russian President Vladimir Putin has chosen to be a "strategic competitor" and "an adversary," and that there are an "increasing number of areas where we are going to need to confront Russia."
Like Mattis, Tillerson said the United States needs to be "clear eyed" about Russia during opening testimony before the Senate Committee on Foreign Relations on Wednesday. Tillerson has faced scrutiny for his past dealings with Russia as CEO of ExxonMobil.
"While Russia seeks respect and relevance on the global stage, its recent activities have disregarded American interests," Tillerson said. "Russia today poses a danger, but it is not unpredictable in advancing its own interests. It has invaded Ukraine, including the taking of Crimea, and supported Syrian forces that brutally violate the laws of war. Our NATO allies are right to be alarmed at a resurgent Russia."
"Russia must know that we will be accountable to our commitments and those of our allies, and that Russia must be held to account for its actions," Tillerson said.
Pompeo also singled out Russia during testimony before the Senate Select Committee on Intelligence Thursday, saying that Moscow has "reasserted itself aggressively, invading and occupying Ukraine, threatening Europe, and doing nothing to aid in the defeat of ISIS."
"It's pretty clear about what took place here about Russia involvement in efforts to hack information and to have an impact on American democracy," Trump's choice to lead the CIA told the committee.
Pompeo assured lawmakers that he would "continue to pursue foreign intelligence with vigor no matter where the facts lead."
Trump has pledged to appoint a team to develop a plan to combat cyber attacks within 90 days of taking office. The transition team announced on Thursday that former New York City Mayor Rudy Giuliani, who runs a security consulting firm, would "lend expertise" to the administration's cyber security efforts.