Edward Swallow
Vice President, Business Development, Civil Systems Division and Lead for Civil Cyber, Northrop Grumman Information Systems

Same answer to both. We want to remain the market leader and most trusted provider of services and products that protect our customer’s information enterprise and enable their mission in a secure environment.

One area we are focusing on is the need to move our customers to “information protection” from just “network protection.” We need to move cybersecurity to a view of “enterprise and mission protection.” We also need to move the boundary for “trusted perimeters” closer to where we can control, inspect, and manage that trust easily. In five years, I hope that government and industry have achieved that on a wide basis throughout the U.S. We will never get rid of the threats completely, but we can do much to mitigate them.

A lot of research is underway on protecting data -- making it so hard to get data out of the system that you’ve made the cost to the enemy prohibitive. That’s why our cybersecurity research consortium is of such importance. By leveraging the innovative freedoms of academia partnered with industry, we can stay in front of the threat and take the next steps needed to develop game-changing technologies.

John Bordwine
Public Sector CTO, Symantec

It’s tough. You can look at it from a year from now get a good idea; five years from now it’s a little bit hazier. What I really would like is for Symantec to be considered to be a technological achievement thought leader that brings in-depth security solutions to its customers. We also would like to be considered to be a major ally to the U.S. Government and its development of its comprehensive cybersecurity model. Even in the next year, that is the goal to shoot for and we are comitted to meeting their expectations. Five years is a long way out. It’s a little tougher. I really would like Symantec to be considereda company that has helped drive the convergence of IT management and IT Security Management into a cohesive strategy. It’s going to take a little while, but the separation of duties within an organization -- and agencies without collaboration -- only increases risks if you have not aligned your IT Management strategy and your IT Security strategy. Without this collaboration, you assume more risk. If a well-defined, well-protected system were to be used by someone that inadvertently could be careless, it actually would launch the prevention model. If you don’t move to this model, you assume more risk both internally and externally. Defining the right policies can ensure a much more comprehensive approach to IT and IT Security Management.