Nashville, TN - JW Marriott , October 13-16, 2019
Maryland, MD - Gaylord National Harbor, May 3-6, 2020
In recognition of the importance of governance in addressing cyber risks, the U.S. Department of Homeland Security (DHS) partnered with the National Association of State Chief Information Officers (NASCIO) to develop a report and series of case studies exploring how states govern cybersecurity. The report and case studies explore how Georgia, Michigan, New Jersey, Virginia and Washington use cross-enterprise governance mechanisms (i.e., laws, policies, structures, and processes) across strategy and planning, budget and acquisition, risk identification and mitigation, incident response, information sharing, and workforce and education. The purpose of the report and case studies is to offer concepts and approaches to other states and organizations who face similar challenges. The report summarizes the case studies and identifies common trends in how cybersecurity governance is addressed across the five states, with supporting examples from each state.
This webinar presents the basics concepts of multisourcing and the “New State CIO Operating Model.” The presentation covers an overview of the NASCIO Multisourcing Initiative which began in January of 2018 in partnership with Integris Applied, Inc. The framework and the maturity model that are being employed as major references throughout the project are presented and explained.
The project workplan includes a survey to be completed by each state and territory, and will be distributed in September 2018. This webinar provides background on the new State CIO Operating Model for those completing the survey. Preliminary results from the survey will be presented at the NASCIO 2018 Annual Conference.
Multisourcing is emerging as the discipline for managing a complex and diversified portfolio of services and service providers. These services are being employed to meet the continual evolving demand for creatively delivering government services through new channels with new functionality. In this evolving circumstance there is the need for a new operating model the state chief information officer can employ to bring together agencies needs and demands with available emerging technologies and management disciplines. This report opens the door to this discussion and explores the underlying forces of change that are driving the need for a new operating model.
David McCurdy, CTO, Colorado, presented Enterprise IT Governance during Top Ten Talks at the NASCIO 2017 Annual Conference in Austin, TX.
Speaker has just 5 minutes to deliver a focused talk on one of the CIO Top Ten Priorities.
Effective metadata management is no longer an option, but an absolute requirement for state governments and federal agencies looking to enable their master data management and data governance initiatives. Without proper metadata management their IT departments cannot manage their systems and ensure that they are providing the true value to the agency.
This practical course leverages the lessons learned from successful metadata management programs and it explains:
• Metadata Management Fundamentals
• Business vs. Technical Metadata
• Metadata Management Use Cases
• Metadata ROI
• Metadata Management and Data Management
This webinar focused on business related software risk. This is the risk that organizations face that is inherent in systems and applications. There are three levels of risk associated with the structure of systems. They include the system level, the technology level and the code level. In this webinar, we explored the magnitude of risk attributable to each of these layers.
Systems and applications in the 21st Century enterprise are highly complex involving many layers and components, technologies, languages. All of this complexity creates risk. Add to this the advent of cloud, mobile, and new approaches to development such as agile and we find mission critical business processes are supported by highly complex portfolio of technology and development that must be orchestrated by an overall architecture.
We explored what can be done about managing this complexity and the inherent risk that accompanies it. You will learn about the Consortium for IT Software Quality (CISQ) and recent legislation that demonstrates the importance government is placing on this type of risk at the federal and state level.
NASCIO conducts a survey of the state CIOs to identify and prioritize the top policy and technology issues facing state government. The CIOs top ten priorities are identified and used as input to NASCIO's programs, planning for conference sessions, and publications.
This brief will open the discussion about blockchains and the potential impact on state government. We won’t delve into the mechanics of blockchains, nor the potential for proliferation of new “e-currencies.” We want to open the door to the world of blockchains through a variety of conversations with leaders in state government and industry in order to begin discussions regarding where blockchain technology can serve the mission of state government.
This report describes the basics of how to get started with a data management discipline. It maintains a simple approach to gaining support including governance, bringing together the right stakeholders, and establishing a compelling business case. This report is the second in a series of reports that deals with WHY is data management important; HOW does state government get started.
The NASCIO Enterprise Architecture program was developed to enable the mission of state and local government. Government must continually reinvent itself to remain relevant by effectively and efficiently providing services to the citizens of this country. The path to this continual transformation must embrace leadership, management, coordination, communication and technology throughout government. Enterprise architecture is the discipline to appropriately define and leverage these capabilities within the complexities of government.
Funding to support the NASCIO EA Program and information sharing initiative is provided by a grant from the U.S. Department of Justice, the Bureau of Justice Assistance, Office of Justice Programs.
The enhancements in the third version of the Tool-Kit result from the expertise and continued dedication of enterprise architecture practitioners from all levels of government and the private sector. Version 3.0 incorporates an updated governance architecture framework with added roles and responsibilities and a focus on multi-level communication. Process models with explanatory narrative are included for governance and the architecture lifecycle. The Tool-Kit also includes fully populated security domain and application domain blueprints.