Can the Private Sector Go on Cyber Offense? with Armadin's Stacy O'Mara

The federal government wants private companies to play a more active role in cyber operations. A new White House memo would allow vetted firms to support government action against transnational criminal groups. The plan marks a shift from sharing threat data to disrupting threats together. But key questions remain: Who controls the mission? Who carries the risk? Where does private support end and government authority begin? Stacy O'Mara joins Frank Cilluffo to discuss those questions. They examine oversight, liability, AI and critical infrastructure. O'Mara also draws lessons from SolarWinds and the war in Ukraine. Her bottom line: Trust must exist before a crisis, and new programs must be tested before they are scaled. Main Topics Covered New rules for private cyber operations From information sharing to joint action Authority, oversight and private-sector risk AI, critical infrastructure and human judgment Trust and readiness before a crisis Key Quotes "We can put all these partnerships in place, create a 70-page memo on how to do it. But at the end of the day, if there's a significant event, it's going to be the leadership of major ISPs, telecoms, and cybersecurity providers who are picking up the phone and calling each other in the middle of the night." — Stacy O'Mara "My gut tells me it is going to take a serious incident, and it would probably include loss of life. …But until we actually go through it and suffer some of the consequences, I don't know that we'll actually be able to put everything into place" — Stacy O'Mara "It can't just be: 'We're going to collaborate, and we're going to do all these things together because we're scared and we don't know what's coming.' But it needs to be: 'What are our desired outcomes?'" — Stacy O'Mara "You want AI to perform operations—or activities, rather—at speed and scale. But the human aspect should be around judgment and consequences. That should not be left up to AI." — Stacy O'Mara "Pilot these programs. Get a win. Figure out what works and doesn't work. And then replicate it and scale it. We don't have to do everything all at once." — Stacy O'Mara Relevant Links and Resources White House memorandum: Expanding Capabilities to Combat Transnational Cyber-Enabled Crime CISA Gold Eagle initiative Armadin Guest Bio Stacy O'Mara leads government affairs at Armadin. She previously held cybersecurity policy and government affairs roles at FireEye, Mandiant and Google. She later advised technology companies at Venable.