SMART LEAN GOVERNMENT NASCIO. Direction, State Experiences and Federated Identity Management. April 29, 2014
|
|
|
- Candice Chandler
- 8 years ago
- Views:
Transcription
1 SMART LEAN GOVERNMENT NASCIO Direction, State Experiences and Federated Identity Management April 29, 2014 Eric Sweden, Program Director, Enterprise Architecture & Governance
2 Overview Enterprise.... Federation.... Ecosystem Cross-Jurisdictional Joining Up Enablers Identity Management Smart Lean Rationalize Optimize Simplify
3 A. Priority Strategies, Management Processes and Solutions Move First 1. Security 2. Consolidation / Optimization 3. Cloud Services 4. Project and Portfolio Management 5. Strategic IT Planning 6. Budget and Cost Control 7. Mobile Services / Mobility 8. Shared Services 9. Interoperable Nationwide Public Safety Broadband Network (FirstNet) 10.Health Care Source: NASCIO State CIO Survey, November 2013
4 A. Priority Strategies, Management Processes and Solutions Security: risk assessment, governance, budget and resource requirements, security frameworks, data protection, training and awareness, insider threats, third party security practices as outsourcing increases, determining what constitutes due care or reasonable Source: NASCIO State CIO Survey, November 2013
5 A. Priority Strategies, Management Processes and Solutions Project and Portfolio Management: project management discipline, enterprise portfolio management (EPM), oversight, portfolio review, IT Investment Management (ITIM), training/certification of staff, traceability to mission and strategy, scope management, execution Source: NASCIO State CIO Survey, November 2013
6 A. Priority Strategies, Management Processes and Solutions Project and Portfolio Management: project management discipline, enterprise portfolio management (EPM), oversight, portfolio review, IT Investment Management (ITIM), training/certification of staff, traceability to mission and strategy, scope management, execution Source: NASCIO State CIO Survey, November 2013
7 Source: NASCIO State CIO Survey, November 2013
8 IT Project and Portfolio Management Widely implemented but generally not effective Need enterprise-wide governance Good at monitoring ongoing projects Ineffective in driving IT investment
9 IT Project and Portfolio Management
10 IT Project and Portfolio Management
11 IT Project and Portfolio Management 37% of State CIOs - Portfolio Management Practices are Effective Keys to Effective IT Investment Management Statewide Standards for Business Cases Stronger Executive-Level Engagement Strong Enterprise-wide Oversight Role by CIO
12 NASCIO on Enterprise Portfolio Management
13 State CIO Challenge Balancing Needs and Resources Enterprise Architecture - the path to Government Transformation
14 Many Portfolios Policies Opportunities Obligations Risks Mandates Constituents Portfolios Populations Roles Technologies Special Interests Lines of Business Best Practices
15 Enterprise Architecture Value Chain Observe the Contextual Environment Fiscal Circumstances Macroeconomics Customer Expectations Customer Behavior Regulations New Technology Competition Mandate Observe the Need or Opportunity (Market) SWOT Analysis Risks Analysis Assumptions Policies Stakeholders Supply / Demand Economics Access Decisions Determine Strategic Business Intent Mission Vision Goals Objectives Strategies Performance Enable Strategic Business Intent Business Relationships Processes Information Organizations Value Chains Management Initiatives Analytics / Six Sigma Balanced Scorecard Geospatial Capabilities Records Management Security Capabilities Enterprise Architecture - the path to Government Transformation
16 Issues Portfolio Enterprise Architecture - the path to Government Transformation
17 Issues Portfolio Observe the Contextual Environment Environmental Natural Resources Public Health Fiscal Circumstances Macroeconomics Customer Expectations Customer Behavior Regulations New Technology Competition Mandate Surfaces Business Needs Economics Public Safety Defense Education Enterprise Architecture - the path to Government Transformation
18 Public Health Portfolio Public Health Health Equity Primary Care Workforce Adequacy & Capacity of Governmental Health Infrastructure Health Quality Health Information Exchange Pandemic / Emergency Preparedness Substance Abuse Enterprise Architecture - the path to Government Transformation
19 Public Safety Portfolio Public Safety Protecting & Supporting Victims of Crime Human Trafficking Recidivism Securing Borders Crime Prevention Pandemic / Emergency Preparedness Substance Abuse Substance abuse what is happening here? Enterprise Architecture - the path to Government Transformation
20 Inter-related Public Sector Spheres Economics Public Health Public Safety Education
21 NASCIO Rendering of the Issue Management Council s Original Issue Management Process Model Issue Identification Evaluation of results Issues Analysis Issue action program Issue change strategy
22 NASCIO EA Value Chain Expanded Evaluation Prioritization Requirements Requirements Requirements Requirements Business Need Business Need Business Need Business Need Business Need Business Need
23 IT Procurement Widespread adoption of reforms is slow Two Major Focus Areas for this survey contract terms & conditions the procurement process
24 IT Procurement Challenges Lengthy process Risk averse nature inhibits innovation Identify and mitigate all perceived risks Equitable sharing of risk
25 IT Procurement Recommendations Recommendations Establish a reasonable cap on vendor financial exposure Adopt license rather than acquisition Limit indemnification obligations to tangible losses injury death damage
26 IT Procurement How would you rate the effectiveness of your IT procurement process?
27 IT Procurement
28 Cybersecurity Most states have adopted continuous vulnerability testing Challenges documenting program effectiveness developing cybersecurity disruption response plans
29 Cybersecurity Threats Require formal strategy Adequate resources Constant vigilance
30 Cybersecurity Threats
31 Identity and Access Management Half of the states have an IAM model implemented or under way Some states are extended their IAM model to include citizens Who are you? Can you prove it?
32 Identity and Access Management
33 Identity and Access Management
34 9. For identity and access management, how would you classify your state s progress? (State Government only) 26% 40% 23% A. My state has an enterprise approach to identify and access management. B. My state has a siloed and incompatible identity management systems, but we want to move to an enterprise approach. C. There have been discussions on identity management systems, but little progress has been made D. It s just not a priority at this time 11%
35 Cross Jurisdictional Collaboration Most states include on strategic agenda Challenges governance turf
36 Cross Jurisdictional Collaboration
37 Cross Jurisdictional Collaboration Types of services states are providing particularly to local government
38 Cross Jurisdictional Collaboration
39 Cybersecurity Cybersecurity continues to be one of the most pressing challenges facing State Chief Information Officers (CIOs) and Chief Information Security Officers (CISOs) today. Security threats to states have been widely reported, however the nature of the game has changed. Cybercriminals and hacktivists a new breed of hacker with a political or social agenda use increasingly sophisticated methods involving rapidly evolving technologies to target cyber infrastructure for monetary gain and to make political statements.
40 Cybersecurity
41 Cybersecurity
42 Cybersecurity
43 10. Which security risk concerns you the most? (State Government only) 7% 15% 11% 9% A. End-user downloads of non-approved apps B. Insider threats C. malware and phishing D. Mobile devices and BYOD E. Sophisticated, pre-meditated attacks by hackers 59%
44 Identity and Access Management
45 Scaling Interoperable Trust through a Trustmark Marketplace John Wandelt john.wandelt@gtri.gatech.edu Georgia Tech Research Institute October 2013
46 Smart Lean Government (SLG) 21 st Century Collaborative Solutions Serving Customers More Responsively, Quickly, Efficiently April 29, 2014 Presented by: Eric Sweden NASCIO Advancing Government through Collaboration, Education and Action
47 Resources Cyberspace Law: Identity Management Legal Task Force CyberSecurity Newsbriefs EA Newsbriefs The Heart of the Matter: A Core Services Taxonomy for State IT Security Programs October
48 Connect with NASCIO o Eric Sweden MSIH MBA Program Director, Enterprise Architecture & Governance NASCIO 201 East Main Street, Suite 1405, Lexington, KY USA esweden@nascio.org Thank You!
State of the States: IT Trends, Priorities and Issues
State of the States: IT Trends, Priorities and Issues OSC Financial Conference 2012 Doug Robinson, Executive Director National Association of State Chief Information Officers Fiscal recovery: budgets are
Cybersecurity in the States 2012: Priorities, Issues and Trends
Cybersecurity in the States 2012: Priorities, Issues and Trends Commission on Maryland Cyber Security and Innovation June 8, 2012 Pam Walker, Director of Government Affairs National Association of State
The Imperative for High Assurance Credentials: State Identity Credential and Access Management (SICAM) Guidance and Roadmap
The Imperative for High Assurance Credentials: State Identity Credential and Access Management (SICAM) Guidance and Roadmap AAMVA Region I Conference E-ID, DLDV, and Privacy Conducting Business Securely
The Digital Identity Ecosystem of the States: Securing the Enterprise
The Digital Identity Ecosystem of the States: Securing the Enterprise Security Industry Alliance September 28, 2011 Doug Robinson, Executive Director National Association of State Chief Information Officers
State of the States: Priorities, Trends and Issues NCSL Fall Forum December 6, 2013
State of the States: Priorities, Trends and Issues NCSL Fall Forum December 6, 2013 Mitch Herckis Director of Government Affairs National Association of State Chief Information Officers Today s State IT
Under the Digital Dome: State IT Priorities, Trends and Perspectives
Under the Digital Dome: State IT Priorities, Trends and Perspectives Best Practices Exchange 2014 Conference Montgomery, Alabama November 19, 2014 Doug Robinson, Executive Director National Association
Emerging Trends in Information. Impacting the States
Emerging Trends in Information Technology and Policies Impacting the States Doug Robinson, Executive Director National Association of State Chief Information Officers About NASCIO National association
State Governments at Risk: The Data Breach Reality
State Governments at Risk: The Data Breach Reality NCSL Legislative Summit August 5, 2015 Doug Robinson, Executive Director National Association of State Chief Information Officers (NASCIO) About NASCIO
Forces of Change: Perspectives and Trends on State Information Technology 2015 Annual NAJIS Conference October 6, 2015
Forces of Change: Perspectives and Trends on State Information Technology 2015 Annual NAJIS Conference October 6, 2015 Doug Robinson, Executive Director National Association of State Chief Information
IT Trends and the Cyber Security Agenda
State of the States: IT Trends and the Cyber Security Agenda Executive Policy Forum on Cyber and Electronic Crime NGA Center for Best Practices September 9, 2008 Doug Robinson Executive Director NASCIO
Office of Emergency Communications (OEC) Mobile Applications for Public Safety (MAPS)
Office of Emergency Communications (OEC) Mobile Applications for Public Safety (MAPS) PSCR Public Safety Broadband Stakeholder Conference June 4 th, 2014 Alex Kreilein Technology Policy Strategist Office
National Cyber Security Policy -2013
National Cyber Security Policy -2013 Preamble 1. Cyberspace 1 is a complex environment consisting of interactions between people, software and services, supported by worldwide distribution of information
Key Cyber Risks at the ERP Level
Key Cyber Risks at the ERP Level Process & Industrial Products (P&IP) Sector December, 2014 Today s presenters Bhavin Barot, Sr. Manager Deloitte & Touche LLP Goran Ristovski, Manager Deloitte & Touche
Destination: Advancing Enterprise Portfolio Management First Stop: Issues Management
Destination: Advancing Enterprise Portfolio Management First Stop: Issues Management Introduction A Balancing Act for the State CIO The state CIO is required to manage a vast array of relationships, needs,
Trends. AAMVA 2012 International Conference August 21, 2012
State eid Priorities, Issues and Trends AAMVA 2012 International Conference August 21, 2012 Chad Grant, Senior Policy Analyst National Association of State Chief Information Officers About NASCIO National
Commonwealth IT Threat Management: Keeping Out the Cyber Villains Category: Cyber Security Initiatives. Initiation date: January 2012
Commonwealth IT Threat Management: Keeping Out the Cyber Villains Category: Cyber Security Initiatives Initiation date: January 2012 Completion date: June 2012 Nomination submitted by: Samuel A. Nixon
Multi-Jurisdictional Provision of Audio, Video, and Web Conferencing Services
NASCIO Multi-Jurisdictional Provision of Audio, Video, and Web Conferencing Services NASCIO Staff Contact: Eric Sweden, MSIH MBA Program Director, Enterprise Architecture & Governance NASCIO NASCIO represents
State CIOs, Emerging Trends and the Forces of Change
State CIOs, Emerging Trends and the Forces of Change xchange SLED Conference May 25, 2016 Doug Robinson, Executive Director National Association of State Chief Information Officers (NASCIO) About NASCIO
CYBER SECURITY, A GROWING CIO PRIORITY
www.wipro.com CYBER SECURITY, A GROWING CIO PRIORITY Bivin John Verghese, Practitioner - Managed Security Services, Wipro Ltd. Contents 03 ------------------------------------- Abstract 03 -------------------------------------
DoD CIO s 10-Point Plan for IT Modernization. Ms. Teri Takai DoD CIO
DoD CIO s 10-Point Plan for IT Modernization Ms. Teri Takai DoD CIO Executive Summary Proactive Partnerships for IT Modernization IT Modernization Strategy Consolidate Infrastructure Streamline Processes
The Virginia Corrections Information System (VirginiaCORIS)
NASCIO The Virginia Corrections Information System (VirginiaCORIS) NASCIO Staff Contact: Eric Sweden, MSIH MBA Program Director, Enterprise Architecture & Governance NASCIO NASCIO represents state chief
CYBERSECURITY IN FINANCIAL SERVICES POINT OF VIEW CHALLENGE 1 REGULATORY COMPLIANCE ACROSS GEOGRAPHIES
POINT OF VIEW CYBERSECURITY IN FINANCIAL SERVICES Financial services institutions are globally challenged to keep pace with changing and covert cybersecurity threats while relying on traditional response
2012 Deloitte-NASCIO Cybersecurity Study State Officials Questionnaire - Aggregate Results (NASACT)
2012 Deloitte-NASCIO Cybersecurity Study State Officials Questionnaire - Aggregate Results (NASACT) November, 2012 Note: This document has been produced for the sole use of National Association of State
CHAPTER 3 : INCIDENT RESPONSE THREAT INTELLIGENCE GLOBAL THREAT INTELLIGENCE REPORT 2015 :: COPYRIGHT 2015 NTT INNOVATION INSTITUTE 1 LLC
: INCIDENT RESPONSE THREAT INTELLIGENCE 1 THREAT INTELLIGENCE How it applies to our clients, and discuss some of the key components and benefits of a comprehensive threat intelligence strategy. Threat
2015 Michigan NASCIO Award Nomination. Cyber Security Initiatives: Michigan Cyber Disruption Response Strategy
2015 Michigan NASCIO Award Nomination Cyber Security Initiatives: Michigan Cyber Disruption Response Strategy Sponsor: David Behen, DTMB Director and Chief Information Officer Program Manager: Rod Davenport,
THE SECURITY EXECUTIVE S GUIDE TO A SECURE INBOX. How to create a thriving business through email trust
THE SECURITY EXECUTIVE S GUIDE TO A SECURE INBOX How to create a thriving business through email trust FORWARD Today the role of the CISO is evolving rapidly. Gone are the days of the CISO as primarily
Cybersecurity: Mission integration to protect your assets
Cybersecurity: Mission integration to protect your assets C Y B E R S O L U T I O N S P O L I C Y O P E R AT I O N S P E O P L E T E C H N O L O G Y M A N A G E M E N T Ready for what s next Cyber solutions
Security Analytics for Smart Grid
Security Analytics for Smart Grid Dr. Robert W. Griffin Chief Security Architect RSA, the Security Division of EMC robert.griffin@rsa.com blogs.rsa.com/author/griffin @RobtWesGriffin 1 No Shortage of Hard
Nanci Knight IBM Academic Initiative Ecosystem Development Relationship Manager West Region email: nknight@us.ibm.com cell: 707.529.
Nanci Knight IBM Academic Initiative Ecosystem Development Relationship Manager West Region email: nknight@us.ibm.com cell: 707.529.9603 IBM At A Glance IBM has 425,000 ee s worldwide 2012 Financials Revenue
NATIONAL CYBER SECURITY AWARENESS MONTH
NATIONAL CYBER SECURITY AWARENESS MONTH Tip 1: Security is everyone s responsibility. Develop an awareness framework that challenges, educates and empowers your customers and employees to be part of the
Partnership for Cyber Resilience
Partnership for Cyber Resilience Principles for Cyber Resilience 1. Recognition of interdependence: All parties have a role in fostering a resilient shared digital space 2. Role of leadership: Encourage
Changing the Enterprise Security Landscape
Changing the Enterprise Security Landscape Petr Hněvkovský Presales Consultant, ArcSight EMEA HP Enterprise Security Products 2012 Hewlett-Packard Development Company, L.P. The information contained herein
Implementing Practical Information Security Programs
Implementing Practical Information Security Programs CISO Summit March 17-19, 2013 Presented by: David Cass, SVP & Chief Information Security Officer, Elsevier Information Security & Data Protection Office
www.pwc.com Cybersecurity and Privacy Hot Topics 2015
www.pwc.com Cybersecurity and Privacy Hot Topics 2015 Table of Contents Cybersecurity and Privacy Incidents are on the rise Executives and Boards are focused on Emerging Risks Banking & Capital Markets
STATEMENT BY DAVID DEVRIES PRINCIPAL DEPUTY DEPARTMENT OF DEFENSE CHIEF INFORMATION OFFICER BEFORE THE
STATEMENT BY DAVID DEVRIES PRINCIPAL DEPUTY DEPARTMENT OF DEFENSE CHIEF INFORMATION OFFICER BEFORE THE HOUSE OVERSIGHT AND GOVERNMENT REFORM COMMITTEE S INFORMATION TECHNOLOGY SUBCOMMITTEE AND THE VETERANS
MICHIGAN AUDIT REPORT OFFICE OF THE AUDITOR GENERAL THOMAS H. MCTAVISH, C.P.A. AUDITOR GENERAL
MICHIGAN OFFICE OF THE AUDITOR GENERAL AUDIT REPORT THOMAS H. MCTAVISH, C.P.A. AUDITOR GENERAL The auditor general shall conduct post audits of financial transactions and accounts of the state and of all
CYBER SECURITY: PERILS AND OPPORTUNITIES
Emerging Technology Forum CYBER SECURITY: PERILS AND OPPORTUNITIES Dr. Dennis Martinez CTO - Harris RF Communications Division June 25, 2013 Cyber Security Addresses Two Key Objectives Protect Information
Office of the Chief Information Officer
Office of the Chief Information Officer Business Plan: 2012 2015 Department / Ministère: Executive Council Date: November 15, 2012 1 P a g e This Page Left Intentionally Blank 2 P a g e Contents The Business
Risk Analytics for Cyber Security
Risk Analytics for Cyber Security Justin Coker, VP EMEA, Skybox Security IT Challenges 2015, Belgium 2nd October 2014 www.skyboxsecurity.com justin.coker@skyboxsecurity.com +44 (0) 7831 691498 Risk Analytics
Into the cybersecurity breach
Into the cybersecurity breach Tim Sanouvong State Sector Cyber Risk Services Deloitte & Touche LLP April 3, 2015 Agenda Setting the stage Cyber risks in state governments Cyber attack vectors Preparing
State of Minnesota. Enterprise Security Strategic Plan. Fiscal Years 2009 2013
State of Minnesota Enterprise Security Strategic Plan Fiscal Years 2009 2013 Jointly Prepared By: Office of Enterprise Technology - Enterprise Security Office Members of the Information Security Council
Securing the Future: Mobile Applications for Public Safety (MAPS)
Securing the Future: Mobile Applications for Public Safety (MAPS) Alex Kreilein, Technology Policy Strategist Office of Emergency Communications (OEC) AMARC Technical Session: Federal Mobile Application
The Heart of the Matter:
The Heart of the Matter: A Core Services Taxonomy for State IT Security Programs NASCIO Staff Contact: Charles Robb Senior Policy Analyst NASCIO NASCIO represents state chief information officers and information
SOCIAL MEDIA MOBILE DEVICES CLOUD SERVICES INTERNET OF THINGS (IOT)
INFORMATION SECURITY AND CYBER LIABILITY RISK MANAGEMENT THE FIFTH ANNUAL SURVEY ON THE CURRENT STATE OF AND TRENDS IN INFORMATION SECURITY AND CYBER LIABILITY RISK MANAGEMENT Sponsored by October 2015
IRM FY2014 2018. Information Resources Management Strategic Plan
IRM FY2014 2018 Information Resources Management Strategic Plan DOE IRM Mission Advance the Department s mission through policy, standards, and services, which meet mission requirements, balance risk and
Cyber Security. John Leek Chief Strategist
Cyber Security John Leek Chief Strategist AGENDA The Changing Business Landscape Acknowledge cybersecurity as an enterprise-wide risk management issue not just an IT issue How to develop a cybersecurity
Cybersecurity The role of Internal Audit
Cybersecurity The role of Internal Audit Cyber risk High on the agenda Audit committees and board members are seeing cybersecurity as a top risk, underscored by recent headlines and increased government
Services. Cybersecurity. Capgemini & Sogeti. Guiding enterprises and government through digital transformation while keeping them secure
Home Secure digital transformation SMACT Advise, Protect & Monitor Why Capgemini & Sogeti? In safe hands Capgemini & Sogeti Cybersecurity Services Guiding enterprises and government through digital transformation
New York State Department of Financial Services. Report on Cyber Security in the Insurance Sector
New York State Department of Financial Services Report on Cyber Security in the Insurance Sector February 2015 Report on Cyber Security in the Insurance Sector I. Introduction Cyber attacks against financial
Agency for State Technology
Agency for State Technology 2015-2018 Statewide Information Technology Security Plan The Way Forward Rick Scott, Governor Jason M. Allison, State CIO Table of Contents From the Desk of the State Chief
Hans Henrik Berthing, CPA, CISA, CGEIT, CRISC, CIA
Hans Henrik Berthing, CPA, CISA, CGEIT, CRISC, CIA HANS HENRIK BERTHING Married with Louise and dad for Dagmar and Johannes CPA, CRISC, CGEIT, CISA and CIA ISO 9000 Lead Auditor Partner and owner for Verifica
2011 Cyber Security and the Advanced Persistent Threat A Holistic View
2011 Cyber and the Advanced Persistent Threat A Holistic View Thomas Varney Cybersecurity & Privacy BM Global Business Services 1 31/10/11 Agenda The Threat We Face A View to Addressing the Four Big Problem
National Initiative for Cyber Security Education
2014/PPWE/SEM2/007 Agenda Item: 5 National Initiative for Cyber Security Education Submitted by: United States Women Business and Smart Technology Seminar Beijing, China 23 May 2014 NICE OVERVIEW Women
FFIEC Cybersecurity Assessment Tool Overview for Chief Executive Officers and Boards of Directors
Overview for Chief Executive Officers and Boards of Directors In light of the increasing volume and sophistication of cyber threats, the Federal Financial Institutions Examination Council 1 (FFIEC) developed
New York State Department of Financial Services. Report on Cyber Security in the Banking Sector
New York State Department of Financial Services Report on Cyber Security in the Banking Sector Governor Andrew M. Cuomo Superintendent Benjamin M. Lawsky May 2014 I. Introduction Cyber attacks against
www.pwc.com Developing a robust cyber security governance framework 16 April 2015
www.pwc.com Developing a robust cyber security governance framework 16 April 2015 Cyber attacks are ubiquitous Anonymous hacker group declares cyber war on Hong Kong government, police - SCMP, 2 October
SECURITY AT THE EDGE: PROTECTING MOBILE COMPUTING DEVICES PART II: POLICIES ON THE USE OF PERSONALLY OWNED SMARTPHONES IN STATE GOVERNMENT
NASCIO Research Brief MARCH 2010 SECURITY AT THE EDGE: PROTECTING MOBILE COMPUTING DEVICES PART II: POLICIES ON THE USE OF PERSONALLY OWNED SMARTPHONES IN STATE GOVERNMENT GROWING ADOPTION, SHRINKING STATE
Managing Data as a Strategic Asset: Reality and Rewards
Managing Data as a Strategic Asset: Reality and Rewards GTA Technology Summit 2015 May 11, 2015 Doug Robinson, Executive Director National Association of State Chief Information Officers (NASCIO) About
State IT Workforce: Recruiting and Retaining Tech Talent NCSL Legislative Summit Minneapolis, MN August 19, 2014
State IT Workforce: Recruiting and Retaining Tech Talent NCSL Legislative Summit Minneapolis, MN August 19, 2014 Doug Robinson, Executive Director National Association of State Chief Information Officers
The Cyber Security Leap: From Laggard to Leader. April 2015
The Cyber Security Leap: From Laggard to Leader April 2015 How do some organizations achieve better security performance? We compared organizations that were able to leapfrog their security effectiveness
Aalborg Universitet. Cyber Assurance - what should the IT auditor focus on? Berthing, Hans Henrik Aabenhus. Publication date: 2014
Aalborg Universitet Cyber Assurance - what should the IT auditor focus on? Berthing, Hans Henrik Aabenhus Publication date: 2014 Document Version Early version, also known as pre-print Link to publication
State of Minnesota IT Governance Framework
State of Minnesota IT Governance Framework June 2012 Table of Contents Table of Contents... 2 Introduction... 4 IT Governance Overview... 4 Process for Developing the New Framework... 4 Management of the
INFRAGARD.ORG. Portland FBI. Unclassified 1
INFRAGARD.ORG Portland FBI 1 INFRAGARD Thousands of Members One Mission Securing Infrastructure The subject matter experts include: 2 INFRAGARD Provides a trusted environment for the exchange of Intelligence
Written Testimony. Dr. Andy Ozment. Assistant Secretary for Cybersecurity and Communications. U.S. Department of Homeland Security.
Written Testimony of Dr. Andy Ozment Assistant Secretary for Cybersecurity and Communications U.S. Department of Homeland Security Before the U.S. House of Representatives Committee on Oversight and Government
11/27/2015. Cyber Risk as a Component of Business Risk: Communicating with the C-Suite. Conflict of interest. Learning Objectives
Cyber Risk as a Component of Business Risk: Communicating with the C-Suite Jigar Kadakia DISCLAIMER: The views and opinions expressed in this presentation are those of the author and do not necessarily
By: Gerald Gagne. Community Bank Auditors Group Cybersecurity What you need to do now. June 9, 2015
Community Bank Auditors Group Cybersecurity What you need to do now June 9, 2015 By: Gerald Gagne MEMBER OF PKF NORTH AMERICA, AN ASSOCIATION OF LEGALLY INDEPENDENT FIRMS 2015 Wolf & Company, P.C. Cybersecurity
Cyber ROI. A practical approach to quantifying the financial benefits of cybersecurity
Cyber ROI A practical approach to quantifying the financial benefits of cybersecurity Cyber Investment Challenges In 2015, global cybersecurity spending is expected to reach an all-time high of $76.9
Managing cyber risks with insurance
www.pwc.com.tr/cybersecurity Managing cyber risks with insurance Key factors to consider when evaluating how cyber insurance can enhance your security program June 2014 Managing cyber risks to sensitive
September 10, 2015. Dear Administrator Scott:
September 10, 2015 Tony Scott United States Chief Information Officer Administrator, Office of Electronic Government and Information Technology Office of Management and Budget 725 17th Street, NW Washington,
RETHINKING CYBER SECURITY Changing the Business Conversation
RETHINKING CYBER SECURITY Changing the Business Conversation October 2015 Introduction: Diane Smith Michigan Delegate Higher Education Conference Speaker Board Member 2 1 1. Historical Review Agenda 2.
Enterprise Security Tactical Plan
Enterprise Security Tactical Plan Fiscal Years 2011 2012 (July 1, 2010 to June 30, 2012) Prepared By: State Chief Information Security Officer The Information Security Council State of Minnesota Enterprise
ITCC. November 18,2015 ITD Room 438
ITCC November 18,2015 ITD Room 438 Agenda 1:00 Update on EA Activity Jeff Quast 1:20 Update on ITD Activity Gary Vetter 1:40 NASCIO 2015 State CIO Survey Dan Sipes 2:00 LPO Directional Statement Justin
7 Homeland. ty Grant Program HOMELAND SECURITY GRANT PROGRAM. Fiscal Year 2008
U.S. D EPARTMENT OF H OMELAND S ECURITY 7 Homeland Fiscal Year 2008 HOMELAND SECURITY GRANT PROGRAM ty Grant Program SUPPLEMENTAL RESOURCE: CYBER SECURITY GUIDANCE uidelines and Application Kit (October
12/11/15. Evolving Cybersecurity Risks. Agenda. The current cyber risk landscape Overview. Results on EY s Global Information Security Survey
Evolving Cybersecurity Risks Results on EY s Global Information Security Survey Agenda Market insights: What are we seeing? Factoring cybersecurity into your planning and risk appetite Marketplace response
NASCIO 2014 State IT Recognition Awards
NASCIO 2014 State IT Recognition Awards Project: California Cybersecurity Task Force Category: Cybersecurity Initiatives Project Initiation Date: September, 2012 Project Completion Date: May 2013 Carlos
Building a Roadmap to Robust Identity and Access Management
Building a Roadmap to Robust Identity and Access Management Elevating IAM from Responsive to Proactive From cases involving private retailers to government agencies, instances of organizations failing
TESTIMONY OF STEVE COOPER DEPARTMENT OF COMMERCE CHIEF INFORMATION OFFICER BEFORE THE SUBCOMMITTEES ON
TESTIMONY OF STEVE COOPER DEPARTMENT OF COMMERCE CHIEF INFORMATION OFFICER BEFORE THE SUBCOMMITTEES ON INFORMATION TECHNOLOGY AND ON GOVERNMENT OPERATIONS OF THE COMMITTEE ON OVERSIGHT AND GOVERNMENT REFORM
Fostering Incident Response and Digital Forensics Research
Fostering Incident Response and Digital Forensics Research Bruce J. Nikkel bruce.nikkel@ubs.com September 8, 2014 Abstract This article highlights different incident response topics with a focus on digital
Enterprise Architecture Maturity Model
N AT I O N A L A S S O C I AT I O N O F S TAT E C H I E F I N F O R M AT I O N O F F I C E R S Enterprise Architecture Maturity Model 167 West Main Street, Suite 600 Lexington, KY 40507 P: 859-514-9153
Network Security Deployment Obligation and Expenditure Report
Network Security Deployment Obligation and Expenditure Report First and Second Quarters, Fiscal Year 2015 June 16, 2015 Fiscal Year 2015 Report to Congress National Protection and Programs Directorate
Cybersecurity Enhancement Account. FY 2017 President s Budget
Cybersecurity Enhancement Account FY 2017 President s Budget February 9, 2016 Table of Contents Section 1 Purpose... 3 1A Mission Statement... 3 1.1 Appropriations Detail Table... 3 1B Vision, Priorities
Public Safety and Homeland Security. National Broadband Plan Recommendations
Public Safety and Homeland Security National Broadband Plan Recommendations Nationwide Interoperable Public Safety Wireless Broadband Network Broadband Network Strategy Vision: For significantly less then
Security for Financial Services: Addressing the Perception Gaps in a Dynamic Landscape
White Paper Security for Financial Services: Addressing the Perception Gaps in a Dynamic Landscape Financial services organizations have a unique relationship with technology: electronic data and transactions
STATE OF MARYLAND 2017 INFORMATION TECHNOLOGY MASTER PLAN (ITMP) Department of Information Technology David Garcia; State CIO
STATE OF MARYLAND 2017 INFORMATION TECHNOLOGY MASTER PLAN (ITMP) Department of Information Technology David Garcia; State CIO Introduction Since taking office in January 2015, Governor Larry Hogan has
Avoiding chaos on the mobile transformation journey. Barriers to true mobile transformation.
www.wipro.com Avoiding chaos on the mobile transformation journey Barriers to true mobile transformation. Alex Anthony (Head Alliance, PMO, Marketing - Wipro Mobility Solutions) Table of Contents 03----------------------------------------------------Introduction
Address C-level Cybersecurity issues to enable and secure Digital transformation
Home Overview Challenges Global Resource Growth Impacting Industries Address C-level Cybersecurity issues to enable and secure Digital transformation We support cybersecurity transformations with assessments,
CYBER SECURITY GUIDANCE
CYBER SECURITY GUIDANCE With the pervasiveness of information technology (IT) and cyber networks systems in nearly every aspect of society, effectively securing the Nation s critical infrastructure requires
The Enterprise Imperative:
The 2013 State CIO Survey OCTOBER 2013 The Enterprise Imperative: Leading Through Governance, Portfolio Management, and Collaboration About the National Association of State s Founded in 1969, the National
Incident Response 101: You ve been hacked, now what?
Incident Response 101: You ve been hacked, now what? Gary Perkins, MBA, CISSP Chief Information Security Officer (CISO) Information Security Branch Government of British Columbia Agenda: threat landscape
Defining a Secure Mobile Framework Architecture at DHA
Ms. Janine Oakley, Transition Manager Innovation and Advanced Technology Development Division 2015 Defense Health Information Technology Symposium Defining a Secure Mobile Framework Architecture at DHA
CONNECTING WITH CONFIDENCE: OPTIMISING AUSTRALIA S DIGITAL FUTURE. AIIA Response
CONNECTING WITH CONFIDENCE: OPTIMISING AUSTRALIA S DIGITAL FUTURE AIIA Response 14 November 2011 INTRODUCTION The Australian Information Industry Association (AIIA) is the peak national body representing
Statewide Electronic Collision and Ticket Online Records (SECTOR)
NASCIO Statewide Electronic Collision and Ticket Online Records (SECTOR) NASCIO Staff Contact: Eric Sweden, MSIH MBA Program Director, Enterprise Architecture & Governance NASCIO NASCIO represents state
Arizona Department of Homeland Security
Arizona Department of Homeland Security Arizona Integrated Planning System (AZIPS) Five-Year Strategic Plan 2013-2018 SEPTEMBER 2012 MISSION STATEMENT The mission of the Arizona Department of Homeland
10 Smart Ideas for. Keeping Data Safe. From Hackers
0100101001001010010001010010101001010101001000000100101001010101010010101010010100 0100101001001010010001010010101001010101001000000100101001010101010010101010010100000 0100101001001010010001010010101001010101001000000100101001010101010010101010010100000
THE 411 ON CYBERSECURITY, INFORMATION SHARING AND PRIVACY
THE 411 ON CYBERSECURITY, INFORMATION SHARING AND PRIVACY DISCLAIMER Views expressed in this presentation are not necessarily those of our respective Departments Any answers to questions are our own opinions
Cybersecurity Best Practices in Mortgage Banking. Article by Jim Deitch October 2015
Cybersecurity Best Practices in Mortgage Banking Article by Jim Deitch Cybersecurity Best Practices in Mortgage Banking BY JIM DEITCH Jim Deitch Recent high-profile cyberattacks have clearly demonstrated
NGA Paper. Act and Adjust: A Call to Action for Governors. for cybersecurity;
NGA Paper Act and Adjust: A Call to Action for Governors for Cybersecurity challenges facing the nation. Although implementing policies and practices that will make state systems and data more secure will
Note: NASCA is in the process of collecting the top pain points for 2016.
Formed in 1976, NASCA brings together state general services professionals from the 50 states, the District of Columbia and the U.S. territories to develop creative and timely solutions to issues facing
DEFENSE INFORMATION SYSTEMS AGENCY STRATEGIC PLAN UNITED IN SERVICE TO OUR NATION
DEFENSE INFORMATION SYSTEMS AGENCY STRATEGIC PLAN 2015 2020 UNITED IN SERVICE TO OUR NATION DIRECTOR S STATEMENT We are at an operational crossroads. We continue to operate in a contested battlespace,