Anything to add to that?

Yeah, I think at the heart of CI Fortify is really that focus on how do we isolate and how do we recover? We have got, I think, a window of time right now to think about what are the real crown jewels? What is it that's most important to local communities and to the stakeholders that we all serve as a broader community? And what is the approach that we need to take to thinking about resilience where it matters most? And those allied initiatives like CI Fortify, I think, are just core and critical to thinking about that approach and understanding that we can't be everywhere securing everything all at once.

We've got to prioritize, and that means making some tough decisions and making some tough calls and being able to invest, I think, in a significant way where it's going to matter most because we're in a dynamic environment.

Recently, just the high degree of attention that things like PHP have gotten.

I think that we're going to continue to see these opportunities for us to engage in a substantial conversation with people because you see that prevalence of 70% to 80% of websites globally affected by things like a PHP vulnerability.

I think we're going to continue to see things that are that scope and scale.

And it's going to lead us, I think, into some very healthy conversations about what does this mean for public health and safety, for continuity of our economy overall, for our national security, for defense critical infrastructure, and what are the downstream impacts associated.

You know, you teed up a perfect, and especially since we're on Wall Street today, what asks do you have of the private sector in particular?

Any thoughts there?

Yeah, I think it's, you know, on the AI front, you know, in particular, you know, the groups that we've spun up, we've actually put a little bit of an emphasis not just on government information sharing, but, you know, in the calls that we're holding every other week with a group of partners on, you know, the AI enabled cybersecurity front and sort of, you know, larger vulnerability management discussions.

We've actually been encouraging our industry partners to volunteer to share amongst their peers on those calls, be able to talk about the lessons learned, be able to talk about the successes that they're having, the struggles that they're having with sort of reconciling this new AI-enabled vulnerability research landscape and changes to how it's changes that they're reflecting within their own internal internal holdings to be able to give them opportunities to continue to develop that space within the ecosystem where we do see that industry to industry partnership partnership engagement i think we're lucky that we've seen that model uh really uh really continue to you know to evolve over time with the isacs with you know legacy cpac at sessa now anchor anchor ci and our new approach to partnerships in that area And we wanted to be able to build that up into a program to address what we saw as some of these gaps of being able to have more focused conversations with people that don't fall within the structure of traditional critical infrastructure, like our equipment manufacturers, subsea cable operators, as an example, and regional focuses as well.

You know, it's it's you know, we want our regional directors to be able to have the ability to have compliance officers embedded with their offices to maybe work off the concept, maybe security is slightly different.

They have slightly different dynamics and concerns in Boston versus Kansas City.

We want to be able to provide every opportunity to, yes, develop that positive government relationship, but also to be an enabler for allowing them to develop those relationships amongst each other.

That said, some of our agencies really have to be focused on those game changers, but we got to do the basics first, right? Nick, anything to add to that? Yeah, I

mean, I think when I think about our work streams in that area, it's really, you know, security of AI, you know, security from AI, and then security with AI.

With this ruthless prioritization having been there still less than a year, what are you ending in OT, in the OT cybersecurity efforts? What are things that you said, this is good, I'm not saying it's bad, but it's not the most important thing that we should be doing? Yeah, I think a consistent, a consistent critique

I've had of CISA either since I've been here or before I came back was whether I'm full of bad analogies.

So the Christmas tree is one of them, you know, looking at, you know, CISA is like Mikey from the old cereal commercial, you know, just give it to Mikey, Mikey will eat anything.

Or, you know, just we peanut butter spread ourselves so thin where we can't have real measurable risk reduction based on the efforts that we're taking on.

So for us, I think it's about working more deeply and working more substantively in a smaller number of these efforts to be able to engage in, again, efforts that are going to measurably reduce risk as we move forward and sort of moving from here's a good idea, or here's the things that are lighter on substance, but, you know, potentially touch on higher level concepts that we can all sort of agree on in principle and saying, okay, now what are we actually going to go do about it? So where I look at where we're going to start to turn some things off, I think some of this collaboration and engagement that we've engaged in for the sake of collaboration and engagement and things where people walk in and feel like they've had a a meeting and everybody feels great and there's a happy hour on the you know the end of the second day and wasn't it great to see everybody like it was a little mini high school reunion some of those elements we're just gonna have to turn off and stop doing you know for for me i've tried to get our team focused on you know national security defense critical infrastructure public health and safety and conduit of our economy If it's one of those things, that has to be the initial tranche we're looking at.

So for us, we then took that.

That gives us a good view of sort of blue space to use DOD, DOW terminology.

How are you going to keep the focus that you want, keep the resources where they want or where you think they should be when you're getting these small water manufacturing, you choose it, getting hit and actually getting a lot of press? How do you prevent yourself and SZA from being diverted? CDL is not,