I think the title should be changed, I was misled, for one.
Chris Krebs is a policy guy by background and I don't see why he is a particularly good choice for a massive post-exploit cleanup, except for PR purposes.
Policy drives security in a lot of ways. You can have a skilled security team and 400 nurses sharing an account because you don't have a great person to drive policy. From experience.
they need to do the right thing moving forward.
cant do that without solid policy
i guess they're looking for some painful home truths then.
The choice of word "victim" is interesting... PR engines full steam ahead I guess.
Ok, we've removed the 'victim' from the title above.
Krebs was the director of CISA at the time of the attacks, arguably the US agency responsible for preventing such attacks. I'm sure he'll do better for them in the private sector.