Nevada is streamlining its state email servers, for all its state employees, to a single provider contract.
Government Technology | Nevada CIO: State’s Major IT Initiatives Are Moving Forward
Category Archives: government data breach
State Trend. Need to fill state cybersecurity jobs? Look to an Appalachian state.
Virginia has a new state level program to train veterans to fill cybersecurity jobs.
Virginia’s vetrans training program :VetSuccess Immersion Academies via SANS CyberTalent Solutions
The veterans can take up to 3 courses and receive certification when they qualify.
30 Governors Support 3 Part CyberSecurity Initiative. What you Need to Know.
These 30 Governors, Republican and Democrat, signed onto ther National Governor’s Association Confront the Cyber Threat Initiative: AL, AK, AZ, AR, CA, CO, CT, DE, Guam, HI, ID, IN, IA, KY, LA, MA, MD,MI, MN, MO, MT, NV, NH, NJ, NC, ND, OK, OR, PA, Puerto Rico, RI, UT, VT, Virgin Islands, WA, WV, WI, WY.
The Compact calls for 3 major strides:
- Growing the nation’s cybersecurity workforce
- Preparing and defending the state from cybersecurity events
-
Building cybersecurity…
1st State. Public Private Partnership Task Force Ready for Cyber Attack. 6 points informed:intel.
Michigan created a volunteer public private task force to step in at a moment’s notice to resolve a cyber attack on state systems.
What is the group called? Michigan Cyber Civilian Corps, MiC3
Has Michigan Cyber Civilian Corps, MiC3 been deployed? No
How does it function? Like a volunteer fire department
Who has volunteered? cybersecurity experts from government, education and private industry
Has any other state done this? No.
3 Ways State and Local Government Struggle with Cybersecurity
- Lack of cyber security funding
- Lack of cyber security talent (see above, talent and government wages don’t align)
- Threats are constantly evolving which takes time, money and talent to stay on top of properly
- hackers target weakeness such as negligent insiders & unpatched vulnerabilities that leave agencies susceptible to risk
GCN | Why state and local government still struggle with cybersecurity
Lege Trend. State baits own employees for cyber awareness.
Missouri tests its state employees with its own phishing scams to keep state employees laser focused on cybersecurity.
Government Technology | In Illinois, Cybersecurity Training for State Employees Now Required by Law
Lege Trend: Train Every State Employee on Cyber Security. Read the Bill. Procurement Niche.
Illinois HB 2371 requires every state employee to complete annual cybersecurity training. The Department of Information resources may offer a video in lieu of training.
By every employee, the Legislature managed to exclude these employees:
- legislative
- judicial
- higher education
- every constitutional officer
Government Technology | In Illinois, Cybersecurity Training for State Employees Now Required by Law
A University Data Breach Informed Statewide Policymakers. 1 Prohibition Emerged.
Washington State University kept sensitive personal information on a backup disk locked in a $159 safe in a small safe in a storage unit.
The WSU storage unit was burlagized, and was the only unit burgalarized.
The takeaway for policy makers: Do not allow state institutions to store personal data in storage units.
Common sense governing. Better late than never.
Lege Trend. State CIO + State Cybersecurity Advisory Council. 3 Key Bits of Intel. Read the bill.
Oregon’s Senate Bill 90 creates a new position of Chief Information Officer who is responsible for:
- Overseeing the Cybersecurity Advisory Council with 9 voting members and an indeterminate number of appointed, non-voting members
- with required participation by law enforcement representatives
- Creating the Oregon Cybersecurity Center of Excellence tasked with inter- and intra-agency coordination, threat response, & information-sharing
- Mandates agency cooperation with the CIO
CONTRACTING TREND. Adding Cybersecurity Standards to Procurement Process. Read the New Rules. See the New Rules Be Adopted by Other Agencies.
Department of Defense is adding cybersecurity standards to its procurement process.
Requirements in the new contracting rules that take effect this fall are:
- Maintain adequate cybersecurity
- Notify the requisite agency of cyber incidents
- Applies to any subcontractors
FedScoop | Pentagon will soon hold contractors to elevated cyber standards