Developing the Collective Defense with Ann Dunkin, CIO at the U.S. Department of Energy

<p><a href="https://www.energy.gov/cio/person/ann-dunkin" rel="noopener noreferrer" target="_blank">Ann Dunkin</a>, Chief Information Officer (CIO) at the <a href="https://www.energy.gov/" rel="noopener noreferrer" target="_blank">U.S. Department of Energy</a> (DOE), joins Carolyn and guest host Willie Hicks to discuss the National Cybersecurity Strategy and what it takes to secure a large agency like the DOE, as well as how agencies balance cybersecurity compliance and risk management. She also highlights the DOE's role in the Partnership for Transatlantic Energy and Climate Cooperation (P-TECCC) and the agency's relationship with its industry partners.</p><h2>Key Topics</h2><ul><li>[01:47] - Affect of the National Cybersecurity Strategy on DOE Modernization Initiatives</li><li>[07:59] - Risk vs. Compliance</li><li>[14:17] - Protecting a Large Agency like DOE vs. Smaller Agencies</li><li>[16:49] - P-TECC Overview &amp; DOE's Work with P-TECC</li><li>[23:14] - Implementing Lessons Learned from the Global Community</li><li>[26:11] - DOE Modernization Efforts &amp; The Role of Public-Private Partnerships</li><li>[30:26] - Where Industry Can Improve</li><li>[36:03] - Tech Talk Question</li></ul><br/><h2>Quotable Quotes</h2><p><strong><em>On the Collective Defense:</em></strong> "The principles of collective defense, which underlie the cybersecurity strategy are incredibly important. That concept that we can't individually be safe, we have to work together. Once upon a time, you'd say, oh, if my cybersecurity's better than the guy down the street, they'll go down the street and forget about me. And we just can't do that. We're too interconnected. There's too much work we do together. There's too many interconnections between our systems. We absolutely positively have to develop that collective defense. In addition, part of that collective defense is ensuring that the burden of defense falls to those most able to deliver on that." - Ann Dunkin</p><p><strong><em>On balancing risk vs. compliance:</em></strong> "The real