Former State Cyber Coordinator Says It Was a Mistake to Close His Office

Flickr user ITU Pictures

The department's former cyber coordinator Chris Painter worries the country is stepping back from its role as a global cyber leader.

When Chris Painter became the State Department’s first cyber coordinator in 2011, he had no international counterparts.

The U.S., alone among nations, had decided the topics his office oversaw—developing international rules of the road in cyberspace, lobbying for a free and open internet, and helping developing nations build cyber emergency response teams—deserved its own office in the State Department.

Now, there are more than 20 similarly positioned cyber executives at foreign ministries across the globe, but Painter’s office is vacant. Secretary of State Rex Tillerson shared plans to shutter the office along with dozens of other offices of special envoys, coordinators and ambassadors in an effort to streamline the State Department bureaucracy.

» Get the best federal technology news and ideas delivered right to your inbox. Sign up here.

Painter’s office will be merged into State’s Bureau of Economic Affairs, according to a plan Tillerson sent to Congress on Monday. Painter’s role—filled by someone else—will be dropped in rank and have less power to work across State bureaus or to press issues on the international stage.

Painter criticized that move in a wide-ranging interview with Nextgov Thursday.

International cyber issues are too broad to be pigeonholed inside a single bureau, he said. Some global cybersecurity challenges, such as nation-state cyberattacks and terrorist recruiting online, also risk being given short shrift by an economic section that’s less concerned with security challenges, he said.

While Painter hopes the new arrangement will work, he said he’s concerned the U.S. may be stepping back from its historic role as a global leader in cybersecurity.

Painter, who is a former prosecutor and longtime Justice Department employee on loan to the State Department, stressed that he was speaking in his personal capacity, not on behalf of any agency.

The transcript below has been edited for length and clarity.

Nextgov: Why do you think State decided to roll your office into the Bureau of Economics?

Painter: I don’t really know. I think part of it was really driven by ‘we should get rid of a lot of special envoys.’ I think my office was different in a lot of ways from most of the special envoys, though. One criticism of a lot of special envoys is that they’re up and outside of the bureaus they should normally deal with, whereas my office was deliberately set up to deal with all of the regional bureaus and really all of the functional bureaus. We dealt with everything from the bureaus of Democracy, Human Rights and Labor to International Narcotics and Law, to Counterterrorism, because a lot of terrorists use the internet, to Arms Control. We were really across the board.

One reason my office was created was that, in each of these areas, the office has its own perspective and they’re meant to advance that perspective. What we tried to do is meld all of those together to come up with a stronger, higher-level policy on cyber issues. I don’t know if that was fully understood.

Even if you do decide to get rid of the special envoy positions, there are other ways to do this I think than the way they chose to do it.

On a broad level, I’m tremendously proud of what we accomplished. However they go forward, my primary wish is that we don’t lose momentum, that we continue to build on this progress and really be leaders. I worry that the way they chose to set it up will have an impact.

Nextgov: What’s wrong with placing the office inside the economics bureau?

Painter: There are two things I see as a concern. One, if you move it down the organizational chain, that sort of pigeonholes it in the bureaucracy. You’re reporting to an assistant secretary who reports to an undersecretary. Whereas, the position I was in reported to the secretary and was able to deal with all the different bureaus. Wherever you put it, there’s going to be a difficulty in signaling [the office’s importance], both within the building and outside the building. If there are ways to ameliorate that or mitigate that, great, but that’s a structural concern and structure does sometimes drive strategy.

The other thing is that the issues my office was leading on were issues like [deterring nations from attacking each other in cyberspace] and international stability and cyber norms [of behavior] and applications of international law [to cyberspace] and working with other countries to have collective action around shared cyber threats. None of those things fit very well in the economic chain and indeed there might be tension between them.

I think people in the economic bureau do important work and my office worked with the economic bureau on some issues, particularly around internet governance. But, people advance the interests of areas they’re in and if you have to go through the economic chain, not all our areas of interests are on the table. It’s especially hard when international counterparts are often in the security area. Some of the countries that are challenges on cyber, like China and Russia, are very much in the security area.

When you’re not playing in this arena every day, there’s a sense that anything that involves the internet is the same, but it’s not. Just like in the real world, there’s a spectrum of activity.

I’m not saying it absolutely can’t work but it creates some initial challenges.

Nextgov: The coordinator for international communications and information policy position is also being rolled into the economics bureau. Is it your sense those positions will be merged?

Painter: I don’t want to speak for them, but that was the impression I got. And, in fairness, that job and the job I was doing, those are both full time jobs. There’s a lot of stuff going on. Obviously, I want that person to succeed and I want the mission to succeed, but it’s harder at that level.

Nextgov: What message do you think this sends to your counterparts in other foreign ministries?

Painter: I worry about that. Uncertainty with our allies is never helpful. They’ve followed our lead and upped this issue as a major foreign policy issue and we want to continue to signal that it’s important. And we don’t want to worry about the signal we’re sending to our adversaries. It’s important that the U.S. continue to lead in this area.

Nextgov: Where do you plan to go next?

Painter: I don’t know. I loved being at that job and I’m glad I got to do it as long as I did. I’m also glad I got to do it during the last six months [during the Trump administration]. I think that helped to continue the path that we were on. I’ve had a very interesting career and I’ve loved all the jobs I’ve had. I’m bad at taking any time off and I don’t take vacations very well, so I have lots of leave time built up and I’m taking some time off. Then I’ll consider what makes sense. I obviously want to stay in this substantive area but I don’t want to rush things.

Nextgov: Are we in a better or worse place regarding cyber issues than we were when you took this post in 2011?

Painter: We’re in a better place in some ways, but the challenges have also increased. We’ve made substantial progress in a number of areas. Six years ago, this was often thought about as a technical issue. You went to cabinet secretaries and ministers or even CEOs and talked about cyber and it didn’t evince much of a reaction. That’s changed dramatically. Now, there’s a recognition this is a core issue of national security and of economics and of human rights.

We’ve made progress as a country coordinating activities among various agencies. Internationally, we’ve built a whole framework of international law and made progress on deterrence. We’re much better off dealing with collective threats, including cybercrime.

We’ve reached agreements with countries that have changed their views. We reached an agreement with China [that barred both nations from hacking the others’ companies for economic gain] that was the result of years of sustained diplomatic effort and other pressure. I think that had an effect. We still need to ensure China complies comply with the agreement and there need to be consequences if they don’t.

Nexgtov: Was the 2015 no commercial hacking deal with China the most important accomplishment during your time in office?

Painter: It’s probably the most high-profile one, but I’d actually say that the bigger accomplishment is the whole framework of stability and how we work with our partners and like-minded coalitions to react to threats. I think that’s the one that will be really important long term. on a macro level, creating an entirely new area of foreign policy focus around the world is up there.

Nextgov: In what ways are we worse off than we were six years ago?

Painter: Not surprisingly, threats continue to arise from criminals and nation states. We’re getting more dependent on these technologies and there are a greater number of vulnerabilities that have first and second order impacts.

You also have some states that are frankly much more destabilizing. The director of national intelligence named four major cyber actors: China, Russia, North Korea and Iran. There are also more countries developing cyber capabilities, often for defensive purpose, but that also creates concerns.

We’re also not over the battles for the future of the internet. Some countries want to draw sovereign boundaries around cyberspace and to control content and information [such as China’s internet censorship regime] and that’s not what the U.S. is about.

Nextgov: What effect did Russia’s digital meddling in the 2016 campaign have on the way the world views cybersecurity?

Painter: I don’t think people saw this coming and it did wake people up. It was such an assault on our democratic process that it caused people who don’t normally pay attention to say, ‘This is a really important issue.’ That’s going to have an impact going forward.

Nextgov: Has the U.S.’s cyber standing been damaged because of President Trump’s hesitancy to acknowledge Russian cyber meddling in the election?

Painter: I prefer not to get into it. I’ll just say that when you have certain activity there has to be consequences. There have to be consequences for activity that undermines the democratic processes of our elections.

Nextgov: You’re known for covering your office wall with posters from movies that have cyber themes. What are some favorites?

Painter: There are a lot of favorites. There’s “Colossus: The Forbin Project,” which I saw in grade school and sat through twice. That tells you something about my personality, maybe. It was the first movie where a computer took over the world. It’s still a classic, kitschy but good. “War Games” was great. “Sneakers” is a wonderful movie. It’s hard to pick among my various children.

There are some bad ones too, to be sure, and some that clearly jumped the shark. There are very few that aren’t dystopian in nature. “2001: A Space Odyssey,” with HAL, was another one that I saw when I was a kid and was enamored with. This isn’t a cyber movie, but, at my going-away party, my staff gave me a poster for “The Avengers” that they’d taped all their faces on.

X
This website uses cookies to enhance user experience and to analyze performance and traffic on our website. We also share information about your use of our site with our social media, advertising and analytics partners. Learn More / Do Not Sell My Personal Information
Accept Cookies
X
Cookie Preferences Cookie List

Do Not Sell My Personal Information

When you visit our website, we store cookies on your browser to collect information. The information collected might relate to you, your preferences or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. However, you can choose not to allow certain types of cookies, which may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more and change our default settings according to your preference. You cannot opt-out of our First Party Strictly Necessary Cookies as they are deployed in order to ensure the proper functioning of our website (such as prompting the cookie banner and remembering your settings, to log into your account, to redirect you when you log out, etc.). For more information about the First and Third Party Cookies used please follow this link.

Allow All Cookies

Manage Consent Preferences

Strictly Necessary Cookies - Always Active

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data, Targeting & Social Media Cookies

Under the California Consumer Privacy Act, you have the right to opt-out of the sale of your personal information to third parties. These cookies collect information for analytics and to personalize your experience with targeted ads. You may exercise your right to opt out of the sale of personal information by using this toggle switch. If you opt out we will not be able to offer you personalised ads and will not hand over your personal information to any third parties. Additionally, you may contact our legal department for further clarification about your rights as a California consumer by using this Exercise My Rights link

If you have enabled privacy controls on your browser (such as a plugin), we have to take that as a valid request to opt-out. Therefore we would not be able to track your activity through the web. This may affect our ability to personalize ads according to your preferences.

Targeting cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Social media cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

If you want to opt out of all of our lead reports and lists, please submit a privacy request at our Do Not Sell page.

Save Settings
Cookie Preferences Cookie List

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Functional Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Performance Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Social Media Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Targeting Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.