Former CISA Director Accused Of 'Bad Faith'

President Donald Trump has signed a memorandum that revokes any active security clearances held by Chris Krebs, the former director of the US Cybersecurity and Infrastructure Security Agency (CISA), and suspends any security clearances held by individuals connected with Krebs’ current employer, cyber security firm SentinelOne.

This memorandum also instructs the Attorney General and the Department of Homeland Security secretary to investigate Krebs’ activities during his time as a government employee, which included serving as Director of CISA from its formation in 2018 until 2020.

Krebs was actually appointed as CISA director by Trump  served in the role until after the 2020 presidential election when he was fired by Trump, via a tweet. The dismissal came after Krebs had vouched for the security of the election, contradicting Trump’s claims of fraud over an election that saw him defeated by Joe Biden. 

The review ordered by Trump will also include a “comprehensive evaluation of all of CISA’s activities” over the past six years.

This memorandum signed by President Trump on Wednesday 9th April directs agency heads to “revoke any active security clearance held by Christopher Krebs” as well as to “suspend any active security clearances held by individuals at entities associated with Krebs, including SentinelOne, where he is employed as Chief Intelligence & Public Policy Officer.

“Christopher Krebs, the former head of the Cybersecurity and Infrastructure Security Agency (CISA), is a significant bad-faith actor who weaponised and abused his Government authority,” says Trump’s memorandum

The accusation against Krebs appears to be personally motivated, and Trump has recently dismissed senior US national security officials, notably including the Director of the National Security Agency (NSA) and head of US Cyber Command, General Timothy Haugh. 

SentinelOne issued a brief statement saying it will “actively cooperate in any review of security clearances held by any of our personnel.”

The White House   |   @C_C Krebs   |   GovInfoSecurity   |   CRN   |   CSO Online   |   Security Week   | 

 Techcrunch  |   Cybersecoop  

Image: Ideogram

You Might Also Read: 

US Cyber Command Were Running An 'Election Special':


If you like this website and use the comprehensive 7,000-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 


 

« The Leading Russian Cyber Security Companies [extract]
Australia's Largest Pension Funds Under A Co-Ordinated Attack »

ManageEngine
CyberSecurity Jobsite
Check Point

Directory of Suppliers

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

Directory of Cyber Security Suppliers

Directory of Cyber Security Suppliers

Our Supplier Directory lists 8,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

TÜV SÜD Academy UK

TÜV SÜD Academy UK

TÜV SÜD offers expert-led cybersecurity training to help organisations safeguard their operations and data.

Security Brigade

Security Brigade

Security Brigade is an information security firm specializing in Penetration Testing, Vulnerability Assessment, Web-application Security and Source Code Security Audit.

Red Balloon Security (RBS)

Red Balloon Security (RBS)

Red Balloon Security is a leading embedded device security company, delivering deep host-based defense for all devices.

Teramind

Teramind

Teramind provides a user-centric security approach to monitor employee behavior in order to identify suspicious activity, detect possible threats, monitor efficiency, and ensure industry compliance.

Untangle

Untangle

Untangle provides network security products designed specifically for the below-enterprise market, safeguarding businesses, home offices, nonprofits, schools and governmental organizations.

GOVCERT.lu

GOVCERT.lu

GOVCERT.lu is responsible for the treatment of all computer related incidents jeopardising the information systems of the government and defined critical infrastructure operators in Luxembourg.

BHC Laboratory

BHC Laboratory

BHC Laboratory is a cyber capabilities’ development company for a wide range of global customers.

Liquid Intelligent Technologies

Liquid Intelligent Technologies

Liquid Intelligent Technologies is a leading communications solutions provider across Africa, providing reliable connectivity, hosting, co-location, and digital services including cyber security.

stackArmor

stackArmor

stackArmor specializes in compliance and security-focused solutions delivered using our Agile Cloud Transformation (ACT) methodology.

Matrixforce

Matrixforce

Matrixforce is a vetted IT support provider that uses the patented Delta Method of streamlining technology for financial and professional service firms to reduce complexity and avoid risk.

PlexTrac

PlexTrac

PlexTrac is a cybersecurity reporting and workflow management platform that supercharges security programs, making them more effective, efficient, and proactive.

Secuna Software Technologies

Secuna Software Technologies

Secuna is the most trusted Cybersecurity Testing Platform in the Philippines. Our pool of vetted security researchers will find and ethically report security vulnerabilities in your product.

North Green Security

North Green Security

North Green Security is a UK-based cyber security training and consultancy company.

Triskele Labs

Triskele Labs

Triskele Labs deliver services including Penetration Testing, Compliance and Risk Management through to 24*7*365 Security Operations and outsourced Cybersecurity Managers.

Concertium

Concertium

Concertium is a complete cybersecurity partner equipped with the expertise and services to deliver end-to-end visibility and protection from evolving cyber threats.

DigiGlass

DigiGlass

DigiGlass is a cutting-edge cybersecurity service provider powered by Redington Gulf, a leading technology distributor in the Middle East and Africa.

CloudQuery

CloudQuery

CloudQuery - bringing clarity into cloud infrastructure. The developer-first cloud governance platform for full visibility into security, compliance, and cost.