CERTS Workshop 2: Research Initiatives – Advances for Government and Industry

1. CERTS Workshop2: Research Initiatives – Advances for Government and Industry Chair: AM COL Dan Bennett, Army Cyber Institute PM COL (Ret) Eric Toler, Georgia Cyber Center

2. Research Initiatives – Advances for Government and Industry  Challenge Area Topic: Challenges of applying research from Government and Industry within the academic environment. * How do we take research initiatives driven from the challenges that exist within government and industry and get at both of those in academia. * How do we know what those are in the first place and also better understand the parallel challenges between government and industry * How do we know who is doing what research and where in order to help mitigate duplicative efforts * How do we prioritize the challenges and build efficiencies across all of the entities represented here and far.

3. Research Initiatives – Advances for Government and Industry: SubGroups • Challenges of applying research from government and industry within the academic environment —led by COL Thomas E. “Eric” Toler (Ret), EXDIR Georgia Cyber Center • Challenges of prioritizing and developing cyber solutions and training the cyber workforce —Led by CDR Pablo Breuer, SOFWERX Innovation Officer • Leveraging Industry Cyber Learning Objectives for Multi-Domain Operations Training for Warfighters—Led by LTC William “Bill” Platte (Ret), VP Mod & Sim and Business Development, Metova

4. Subgroup1: Partnership Opportunites • What are the largest constraints to government and private industry’s ability to conduct collaborative research with universities (e.g. security classification, proprietary/intellectual property concerns, policy limitations, cost, timeliness, etc.)? • What are the best practices to facilitate collaborative research between government, private industry, and academia (e.g. internships, symposiums, grants, CAEs, etc.)? • What are some current opportunities for government and private industry to conduct collaborative research with academic institutions?

5. Subgroup2: Prioritizing solutions, training • Challenges recruiting, retaining, and promoting the cyber workforce • Challenges with defining and prioritizing cyber requirements • Challenges maintaining proficiency in the cyber workforce

6. Subgroup3: Leveraging Industry for Multi-Domain Operations Training • Translating Cyber Learning to Warfighter Training • Cyber Effects/Outcomes for the Warfighter • Training for Cyber in the Escalation of Conflict

7. CERTS Workshop2: Research Initiatives – Advances for Government and Industry Chair:AM: COL Dan Bennett, Army Cyber Institute PM: COL (Ret) Eric Toler, Georgia Cyber Center Workshop Outbrief January 17,2019

8. WorkshopGroups

9. Group1 • Co- Chair: COL (Ret) Eric Toler, Georgia Cyber Center • Subgroup1: Challenges of applying research from government and industry within the academic environment • PROBLEM: The research efforts between academia industry, industry, and government are not coordinated in a manner that will allow us to compete with our adversaries over the next 10 years. • Challenges: • Constantly evolving requirements / lack of threat understanding • Stovepipe structure • Competitive culture drives us apart • Information protection concerns • Opportunities: • States have an opportunity to lead in this field • Resources already available • Adopt a Development and Operations (DEVOPS) approach to research and development • Align university research to real-world cyber security challenges (internships) • Public-Private Partnerships

10. Group2 • Co-Chair: Pablo Breuer, SOFWERX • Subgroup2: Challenges of prioritizing and developing cyber solutions and training the cyber workforce • Requirement definitions need to improve in order to allow for rapid innovation and support • Ensure input from the users (i.e. JRPs) • Include computer security professionals early on in development • Update the FAR • Mandate open standards • Allow for a more collaborative environments • UCC should set the priority • Leverage/ coordinate/different exercises/ events into a “DefenseWerx” construct

11. Group2 • Co-Chair: Pablo Breuer, SOFWERX • Subgroup2: Recruitment, training and retention of Cyber Forces • Defined career progression • Not required to leave the cyber field to get promoted • Investment: Education, continual training and training with industry opportunities=====Follow on assignment to jobs that utilize this training (don’t just fill a slot) • Accelerated promotion schedule • FUN JOBS • Recruitment: Consider aptitude testing; potential additional testing in later • Industry: Issues with clearances; talent pool from DOD vs non Defense

12. Group3 • Co-Chair: LTC Bill Platte (Ret), Metova • Subgroup3: Leveraging Industry Cyber Learning Objectives for Multi-Domain Operations Training for Warfighters • Actively Integrate Cyberspace and EW into M&S Training Platforms ISO MDO. • Actively Develop Training Platforms at the Strategic, Operational, Tactical levels based on user defined requirements. • Cyber for Cyber • Cyber for Others • Cyber for All • Actively Link Industry, DoD, and Academia lessons learned for Cyber/EW training is essential to National Security