00:00I now recognize Mr. Suozzi for his five minutes testimony. Thank you Mr. Chairman. I want to thank
00:06you and the Ranking Member for holding this hearing. Holding Microsoft accountable is a
00:10good idea and I think that Mr. Smith has demonstrated he's taken his father's advice.
00:15I think you said it was your father that said nobody ever died by using humility. I don't know
00:20if he said it but he definitely he's still alive today. He's probably watching this for gosh sakes.
00:24Well it is definitely something he taught me. You've definitely taken accountability here today
00:29and we appreciate that. Let me just ask what percentage of Microsoft's business comes from
00:35governments? If I had to guess it's a lot less than 10 percent globally. So what percentage of
00:44it is from just the federal government itself? Not that much. We love the federal government.
00:50It is a big customer. It's one of our biggest and it's the one that we're most devoted to but
00:55it's not the big source of our revenue. A couple percent. So you mentioned earlier that there are
01:01300 million cyber attacks a day. Are the sources from state-sponsored adversaries of ours like
01:10China, Russia, Iran and Korea? Is it from organized crime or is it from individuals who are doing
01:18this? I would say most of it comes either from those four nation states or ransomware operators.
01:24We track over 300 organizations and those 300 account for by far the highest percentage.
01:35Can you give a percentage for how much is from the state actors versus the ransomware people?
01:41Are the state actors sometimes ransomware activists also? I can. I'm forgetting off the
01:47top of my head but we can easily get that to you. I will say in addition to being a substantial
01:52percentage, they're by far the most sophisticated and serious. So my big concern for our country is
01:57how divided we are and our country is divided because of our members of congress. There's 435
02:03of us. 380 of them are in safe seats so they don't have to worry about the people per se. They only
02:09have to worry about the people in primaries so they pander to their base. That divides us.
02:14And then social media, the people get the most attention on social media. People say the most
02:17extreme things. And then cable news, you know, Tucker Carlson was the most followed person on
02:24Fox before he left. Rachel Maddow, they've got 4 million viewers, 3 million viewers. They're
02:29kind of playing to the extremes. But our foreign adversaries, Chinese Communist Party, Russia,
02:35Iran, and North Korea are taking disinformation and trying to divide us every day by taking
02:42messages that we're fighting about already and blowing them up bigger than ever. We need the
02:48great corporate citizen, Microsoft, and other great corporate citizens to team up with the people of
02:54the United States of America and their governments to figure out how we're going to stop this attack
02:59because they're trying to destroy us from within by dividing us using technology and disinformation
03:07and cybersecurity attacks on a regular basis to destroy us. So what can we do to team up more
03:12effectively? And what other partners other than the United States government and Microsoft should
03:18we try and bring into this partnership to try and save our country from this division that is being
03:23exacerbated by our foreign adversaries? Well, there's lots of great companies in our industry
03:28that are doing great things, you know, in all areas of the industry. And the good news is,
03:33especially there's this extraordinary CISO, Chief Information Security Officer community,
03:38where people work together across industry boundaries. We need to advise the public about
03:44what's happening. Exactly. And I think we need processes to do that. And I would say at the end
03:50of the day, look, I think the point you just made is maybe the most important point that could be
03:56made at this hearing, because the greatest threat to this country in this space comes if our
04:01adversaries coordinate and unite, and we should assume that they not only can, but they will.
04:06They are. And the greatest weakness of this country is that we're divided, not just politically,
04:14but in the industry as well. And we just always have to remember that if we can find a way to
04:23summon the ability to work together, you all, if you can work together across the aisle, and we
04:28in our industry can work across the industry, and then we unite together with new processes
04:34that are probably government-sponsored, and some of them exist, including through CISA,
04:38so we can do what you just described, and among other things, help people learn, and also take
04:45the steps to hold these adversaries accountable so we can start to change what they are doing.
04:52Thank you, Mr. Smith. Mr. Chairman, I would, oh, Ms. Chairman, I'd like to participate in an effort
04:58by this committee, bipartisan in some way, working with industry to come together as a team
05:03to figure out what we can do as a country to identify these threats, notify the public as
05:10to what's happening to them on a regular basis, and how we as a country, corporate-public-private
05:15partnership, can unite to fight against our foreign adversaries that are trying to destroy
05:21our country. Thank you, Mr. Smith.
Comments