Shaping the Future of Cyber Diplomacy: Review for State Department Reauthorization

Defense Posture and Global ThreatsHouse Foreign Affairs Subcommittee on Europe · 2025-04-29 · 119th Congress
The House Foreign Affairs Subcommittee on Europe held this hearing to review the Bureau of Cyberspace and Digital Policy (CDP), created in 2022, ahead of State Department reauthorization and amid Secretary Rubio's proposed reorganization that would split CDP's economic and security functions. Begins at 0:00:00
Transcript
Highlights

Title

State Department cyber bureau's role and proposed reorganization

Purpose

The House Foreign Affairs Subcommittee on Europe held this hearing to review the Bureau of Cyberspace and Digital Policy (CDP), created in 2022, ahead of State Department reauthorization and amid Secretary Rubio's proposed reorganization that would split CDP's economic and security functions. Witnesses from GAO, the Foundation for Defense of Democracies, and Verific AI testified on CDP's coordination with other agencies, foreign assistance programs, workforce challenges, and threats from China, Russia, Iran, and North Korea. Begins at0:00:00

Who spoke

Chairman Self0:00:00: Opened by describing cyber threats from China, Russia, Iran, and North Korea0:00:00, cited CDP's role in responding to a Costa Rica ransomware attack0:00:54 and subcable projects in the Pacific Islands0:01:16; later questioned witnesses on the Spain/Portugal/France power outage's possible link to a cyber attack0:25:11, salary competitiveness0:53:49, and reorganization recommendations0:55:04.

Ranking Member Keating (D-MA)0:02:36: Noted CDP was authorized into statute by the 2022 State Department Authorization Act0:03:06 and cited CDP's support to Costa Rica0:03:57 and Ukraine0:04:22; criticized Rubio's reorganization plan as splitting CDP and creating duplication0:05:18, and said USAID cuts and workforce politicization harm capacity building0:06:13; later raised concerns about staff siloing under reorganization0:34:38 and objected to the chairman's manner of introducing a colleague0:46:03.

Annie Fixler, FDD0:09:35: Said China has prepositioned destructive cyber capabilities against US infrastructure0:10:43 and described an FDD Taiwan tabletop exercise showing resilience deters Chinese aggression0:12:58; discussed undersea cable vulnerability0:52:56 and the CHIPS Act funding for securing communications infrastructure0:13:29.

Latesha Love-Grayer, GAO0:14:32: Summarized GAO findings that CDP was not initially coordinating with other agencies or using data to justify its structure0:17:05, later resolved after recommendations0:17:54; described CDP's 11 interagency agreements0:28:42 and said GAO has not yet assessed the impact of foreign assistance cuts on CDP but plans to0:51:01.

Theodore Nemeroff, Verific AI0:19:46: Recommended CDP adopt a "full stack" approach to cyber and digital diplomacy0:21:02, highlighted the Falcon rapid-response capability0:22:35, and posed four questions for evaluating the reorganization0:23:53; discussed AI competition with China and outbound investment screening0:38:03.

Rep. Davidson (R)0:35:08: Questioned Fixler on USAID cuts' effect on cyber assistance0:35:37 and undersea cable investment strategy0:36:52; pressed Nemeroff on outbound AI investment restrictions0:37:15 and free-speech concerns tied to CISA's misinformation work0:39:01.

Rep. Amo (D)0:40:15: Argued Rubio's reorganization undermines CDP's coordinating mission and risks harming collaboration with CISA amid CISA's own budget cuts0:41:000:42:47; asked Love-Grayer about CDP-CISA coordination0:42:47 and raised workforce firing concerns0:45:04.

Rep. McBride (D-DE)0:47:22: Asked Nemeroff how CDP can stay ahead on emerging technology0:48:20 and Love-Grayer about the effect of USAID cuts on CDP outreach0:49:35; emphasized protecting the federal cyber workforce0:51:01.

Rep. Kim (R)1:00:12: Asked how private-sector expertise, including from firms like Verific AI, can strengthen allied cyber resilience1:00:33; questioned witnesses on public-private partnerships1:01:29 and asked Love-Grayer about overlapping cyber responsibilities among State bureaus1:03:191:04:53.

Key moments

Fixler said an FDD tabletop exercise found Beijing's greatest deterrent concern was not US countermeasures but whether Taiwan's infrastructure could withstand an attack0:12:58.

Chairman Self read a Siemens security advisory suggesting a recent European blackout possibly originated from a sophisticated cyber attack on a Basque-region substation exploiting a known Siemens vulnerability0:25:42.

Keating and Amo both said Secretary Rubio's reorganization would split CDP's economic functions from its security functions into a new "emerging threats" bureau, calling it duplicative and undermining CDP's original integration mandate0:05:180:41:27.

Love-Grayer said GAO's review found CDP has 11 formal interagency agreements (with DoD, Commerce, FCC, DHS, USAID, and others) but still faces unresolved overlap with the Bureau of Democracy, Human Rights and Labor and the Bureau of International Narcotics and Law Enforcement0:28:421:04:02.

Fixler cited FDD reporting that a $1.2 billion Intel investment in Costa Rica followed CDP-driven changes to the country's cyber norms and policies1:02:37.

Fixler said State Department cyber staff are paid on the standard GS-15 scale with no special cyber pay, while private-sector salaries reach "hundreds of thousands of dollars"0:54:140:55:04.

Love-Grayer said the CDP ambassador reported directly to the Deputy Secretary, giving the bureau outsized "gravitas" and resource-garnering power that could diminish under reorganization0:44:10.

A tense exchange between Keating and Chairman Self over the chairman's manner of introducing Rep. McBride prompted Keating to formally object on the floor0:46:03.

Nemeroff described CDP's newly piloted "Falcon" capability, which rapidly deploys private-sector incident responders to countries facing cyber attacks0:22:58.

Love-Grayer said DOD's "Hunt Forward" operations identify partner countries' cyber vulnerabilities, which CDP then follows up on with technical assistance and capacity building0:28:12.

Metadata

CommitteeHouse Foreign Affairs Subcommittee on Europe
Chamber / CongressHouse · 119th Congress
Date2025-04-29
TypeHearing
Witnesses
Ms. Latesha Love-Grayer — Director, International Affairs and Trade, U.S. Government Accountability Office
Ms. Annie Fixler — Director, Center on Cyber and Technology, Foundation for Defense of Democracies
Mr. Theodore Nemeroff — Co-Founder and Vice President for Data and Compliance, Verific AI
Videoyoutube
Transcript155 caption blocks · 10,654 words · 1:06:24 runtime
EventCongress.gov 118161