US-CERT director Ann Barron-DiCamillo explains how Computer Emergency Readiness Team deals with evolving cybersecurity threats
US-CERT director Ann Barron-DiCamillo on the challenges of stopping cyberattacks — Amid a torrent of cyberattacks and seemingly endless data breaches …
Context & Ripple Effects
This interview closes out a pivotal year in how Washington organizes its civilian cyber defense: months after the US began forming the Cyber Threat Intelligence Integration Center to collate intelligence against cyberattacks, US-CERT director Ann Barron-DiCamillo walks through how her team confronts what she describes as a torrent of attacks and data breaches.
Read forward from here, the piece is an early snapshot of an agency about to be absorbed into something bigger — coverage of CISA's successor leadership shows the same organization later struggling with funding and talent while taking on network-scanning and election-protection missions.
First-order effects
- For federal agencies and private-sector partners consuming US-CERT alerts and incident response, the interview frames the team's day-to-day playbook against adversaries whose tactics shift faster than fixed defenses.
Second-order effects
- The resourcing gap the interview implies becomes explicit later: reporting on CISA shows it underfunded, short on talent, and overwhelmed by fallout from two massive cyberattacks, forcing successive directors to lobby for hiring and expanded authorities like scanning federal networks for malicious code.
Third-order effects
- If the pattern holds, every major threat wave spawns a new institutional layer — from US-CERT and the integration center through CISA's election-defense ramp-up to the State Department's Bureau of Emerging Threats targeting cyberattacks and AI weaponization — raising the standing question of whether responsibility consolidates or fragments across overlapping cyber bureaucracies.
The trend: US civilian cyber defense has spent a decade institutionalizing outward, with each escalation in adversary capability adding a new agency, bureau, or mandate on top of the last.