It is little use to have a cybersecurity coordinator. Note: it only took a half of hour to achieve that DDoS. If that coordinator recevied an alert, it is time to do recovery on a massive damage. The best way is to evolve Einstein 3 to capable to detect that DDoS attack pattern and then set those suspected attacks with best effort (i.e. ignore them). Then the coordinator can do recovery on a small scale damage and trace the origin of the attack.

If our Federal government is going to be focusing its attention on simple DDoS attcks, we may as well give up now. If the author thinks a DDoS of public websites is a serious attack that is "savaging government websites" and needs the attention of the cybersecurity tzar, maybe the job title CSO Senior Editor has been given away a little too freely.