Jane Lute: Security typically assigned to government in all space but cyberspace

Video: Visa handles 30,000 transactions a second, 56 billion transactions a year, according to Ellen Richey, Visa's chief enterprise risk officer. “The payment industry is losing $10 billion a year from [cyber] theft,” she adds, at Washington Post Live's 2013 Cybersecurity Summit. Former deputy secretary of Homeland Security Jane Lute nods at another summit theme — we’re not talking about cyber prevention anymore. “There are a number of things we can do — basic hygiene we can do, but we’re not doing.”

As part of its 2013 Cybersecurity Summit, Washington Post Live convened leading national security officials, industry experts and journalists for conversations addressing cyber risks and the future of cyber defense.

Jane Lute, former deputy secretary of homeland security; president and CEO, Council on CyberSecurity


Contrails from jet planes passing overhead intersect the National Museum of Art in Washington, Thursday morning, April 17, 2014. (AP Photo/J. Scott Applewhite)

Photos of the day

Scenes from Holy Week events, South Korean ferry search efforts, macaw conservation and more.

If you go to a police officer and you say, “Officer, someone stole my car. I left it with the keys running in a bad part of town with the windows down,” the cop will say, “Yeah, file a report.” So there are a number of things that we can do way upstream to reduce some of these [cyber] losses. They’re relatively easy to do — like listing [authorized] software, limiting administrative permissions, real-time patching of your systems and applications — and we are just not doing it. . . .

Security is typically something that societies assign to their governments to handle. We want safe streets: Government, you run the police. We want a safe country: Government, you run the military. That’s true in all space except cyberspace. That assignment has not been handed over to government. So the real key question now is what role will government play? Eighty to 90 percent of the critical infrastructure in this country is in private-sector hands, but we can’t stand around and wait for the market to generate a solution to cybersecurity, so government is in this space collectively with the private sector.

The arms race in cybersecurity

After leaks, NSA struggles for trust

Fort Meade transforming from Army base to cyber city

Read what others are saying