NASCIO Champions National Cyber Security Awareness Month

/in /by

The National Association of State Chief Information Officers (NASCIO) is once again observing National Cyber Security Awareness Month (NCSAM) by being an official cybersecurity champion. The Department of Homeland Security's Office of Cybersecurity and Communications, the Multi-State Information Sharing and Analysis Center and the National Cyber Security Alliance are promoting cyber security awareness, safety and security online. Once again, NASCIO is partnering with these organizations to officially show support and promote a safer, more secure and trusted Internet.

This year, NCSAM will emphasize “personal accountability and stress the importance of taking proactive steps to enhance cybersecurity at home and in the workplace.” This year’s theme is Own IT. Secure IT. Protect IT. and will focus on key areas including citizen privacy, consumer devices and ecommerce security.

“NASCIO applauds those states who have issued proclamations to recognize October as National Cybersecurity Awareness Month and calls on everyone to commit their support to helping raise awareness about the importance of securing cyberspace,” said NASCIO Executive Director Doug Robinson.

To learn more about participating in National Cyber Security Awareness Month, please visit www.staysafeonline.org.

NASCIO Brief Calls for Increased Engagement in Customer Relationship Management

/in /by

The National Association of State Chief Information Officers (NASCIO) today released a publication on customer relationship management (CRM). The business practice of CRM has become more important in the last several years as state chief information officers (CIOs) have had to adapt to a shift from owning and operating services to now being the broker of services and a more consolidated environment. This is evident in the fact that, in 2019, for the first time ever, CRM made the NASCIO State CIO Top 10 Priorities list at number seven. CRM, which is described as “building customer agency confidence, trust and collaboration; internal customer service strategies; and service level agreements,” is an integral part of a state CIO’s daily operations.

NASCIO President and Delaware CIO James Collins said, “In the face of rapidly-evolving business models and a significant increase in the demand for digital services, it is more critical than ever for CIOs to prioritize cultivating partnerships — especially with government agencies responsible for delivering life and safety citizen services. This focus is fundamental to understanding the business processes that underly the missions of these agencies and essential for leveraging technology to realize the promise of digital government.”

The publication highlights challenges such as agency loss of control, consolidation, rate setting and funding and acquisition and also includes recommendations or “keys” to successful customer relationship management:

  • Building relationships
  • Selling the benefits of shared services
  • Folding customer service into strategic plans
  • Providing internal training
  • Communications and feedback

The publication is available on the NASCIO website: www.NASCIO.org/ResourceCenter

NASCIO Announces Finalists for 2019 NASCIO State IT Recognition Awards

/in /by

The National Association of State Chief Information Officers (NASCIO) has selected 30 finalists across 10 categories for the State IT Recognition Awards. Projects and initiatives from NASCIO member states and territories were eligible for nomination. NASCIO members served as volunteer judges to review the over 130 submissions, narrowing the nominees down to finalists in each category. From these finalists, a recipient from each category will be announced during an awards dinner at the upcoming NASCIO Annual Conference this October in Nashville, TN.

The award nominations showcase the use of information technology to address critical business problems, more easily connect citizens to their government, improve business processes and create new opportunities that improve the lives of citizens. To ensure states have access to the innovations and leading practices of their peers, all award submissions will be added to NASCIO’s awards library by late September.

Award finalists for the 2019 State IT Recognition Awards are:

Business Process Innovations 
State of Michigan: JobNet: Road to the Future 
State of North Carolina: Modernizing Estuarine Habitat Mapping with Unmanned Aerial Vehicles  
State of Tennessee: MHSAS’s Electronic Clinical Record, Using IT to Provide Better Patient Care 

Cross-Boundary Collaboration & Partnerships 
State of Georgia: Georgia Cyber Center 
State of Indiana: Connecting Indiana’s Medicaid and Corrections Data to Improve Hoosier Health 
State of North Carolina: Improving Emergency Response Precision with the State Emergency Response Application  

Cybersecurity 
State of Iowa: Election Cybersecurity Partnership Project 
State of Ohio: Digital Identity: Providing a Secure Customer Experience 
State of Texas: Managed Security Services – Provided by Texas for Texas Governments 

Data Management, Analytics & Visualization 
State of Connecticut: Cross Agency Data Sharing to Drive Value and Save Money 
State of Illinois: Winning Against Tax Fraud with Data Analytics 
State of Utah: Intergenerational Poverty Initiative Data Driven Solutions 

Digital Government: Government to Business 
State of Minnesota: Preparing for Emergencies: Medical PreCheck & Locator App 
State of North Carolina: Improving Health Outcomes through the State Health Information Exchange 
State of Tennessee: Rip, Replace, Revitalize! Project TR3 

Digital Government: Government to Citizen 
State of North Carolina: Women, Infants and Children Benefits in the Mobile Application Age 
Commonwealth of Pennsylvania: Child Support Enforcement System (PACSES) and JobGateway Integration Initiative 
State of Tennessee: TennCare Connect: A Multi-Channel Gateway Elevating the Member Experience  

Emerging & Innovative Technologies  
State of New Jersey: Integrated Drug Awareness Dashboard (IDAD) 
State of Tennessee: Halt, Who Goes There? Tennessee’s Facial Recognition System (FRS) Project 
State of Washington: Using UAS Technology in Collision and Crime Scene Reconstruction 

Enterprise IT Management Initiatives 
State of Arizona: Building the Governance Model 
State of California: Examination and Certification Online System (ECOS) 
Commonwealth of Pennsylvania: Pennsylvania IT and HR Shared Services Transformation 

Information Communications Technology (ICT) Innovations  
State of California: Identification and Removal of Hazardous Materials During Wildfire Response 
State of Georgia: Mobile Field Data Collection for Food Emergency Response 
State of Oklahoma: Oklahoma Videoconferencing Solution Saves Time for Citizens and State Employees 

State CIO Office Special Recognition 
State of California: Licensing Medicinal Adult-Use Cannabis 
State of Idaho: Instant Invoice Payments by Text Message and/or Email 
​State of Washington: Sexual Assault Kit Tracking System 

CISA, MS-ISAC, NGA & NASCIO Recommend Immediate Action to Safeguard Against Ransomware Attacks

/in /by

Take the First Three Steps to Resilience Against Ransomware for State and Local Partners

The recent ransomware attacks targeting systems across the country are the latest in a string of attacks affecting State and local government partners. The growing number of such attacks highlights the critical importance of making cyber preparedness a priority and taking the necessary steps to secure our networks against adversaries. Prevention is the most effective defense against ransomware.

The Cybersecurity and Infrastructure Security Agency (CISA), Multi-State Information Sharing and Analysis Center (MS-ISAC), National Governors Association (NGA), and the National Association of State Chief Information Officers (NASCIO) are committed to supporting ransomware victims and encouraging all levels of government to proactively protect their networks against the threat of a ransomware attack. Today, we call on our State, local, territorial and tribal government partners, along with the wider cyber community, to take the following essential actions to enhance their defensive posture against ransomware. Through this collective action, we can better protect ourselves and our communities, and further advance the cyber preparedness and resilience of the Nation.

Three Steps to Resilience Against Ransomware:

  1. Back-Up Your Systems – Now (and Daily)
    Immediately and regularly back up all critical agency and system configuration information on a separate device and store the back-ups offline, verifying their integrity and restoration process. If recovering after an attack, restore a stronger system than you lost, fully patched and updated to the latest version.
  2. Reinforce Basic Cybersecurity Awareness and Education
    Ransomware attacks often require the human element to succeed. Refresh employee training on recognizing cyber threats, phishing and suspicious links – the most common vectors for ransomware attacks. Remind employees of how to report incidents to appropriate IT staff in a timely manner, which should include out-of-band communication paths.
  3. Revisit and Refine Cyber Incident Response Plans
    ​Agencies must have a clear plan to address attacks when they occur, including when internal capabilities are overwhelmed. Make sure response plans include how to request assistance from external cyber first responders, such as state agencies, CISA and the MS-ISAC, in the event of an attack.

Additional Resources

After implementing these recommendations, refer to the ransomware best practices published by CISA, MS-ISAC, NGA, and NASCIO for additional steps to protect your organization.

Download PDF

NASCIO Endorses State and Local Government Cybersecurity Act of 2019

/in /by

WASHINGTON, D.C., Thursday, July 11, 2019 —The National Association of State Chief Information Officers (NASCIO) today endorsed S. 1846, the State and Local Government Cybersecurity Act of 2019. Introduced by Senators Gary Peters (D-MI) and Rob Portman (R-OH), the legislation amends the Homeland Security Act of 2002 to provide for engagements with state, local, tribal and territorial governments.

Specifically, S. 1846 provides for additional federal grant opportunities to state, local and tribal governments to safeguard against cyber threats. It also strives to make serious efforts to strengthen the communication between the Department of Homeland Security (DHS) and state and local officials to combat a myriad of cybersecurity threats. S. 1846 further codifies the coordination between DHS and the Multi-State Information Sharing and Analysis Center (MS-ISAC). Additionally, the legislation includes a proposed pilot deployment of enhanced capabilities to state and local governments to identify and filter malicious network traffic, which is currently only available to federal agencies.

NASCIO President and Delaware CIO James Collins lauded the introduction of S. 1846 saying, “states are the primary agents for delivering a host of critically important federally funded services on behalf of the federal government. For our CIOs and CISOs, this legislation would provide them with additional tools, resources and expertise to counteract a continuous barrage of cyber threats. We urge the Senate to pass S. 1846.”

The State and Local Government Cybersecurity Act of 2019 was introduced in the United States Senate in June and referred to the Senate Committee on Homeland Security and Governmental Affairs.

NASCIO Conference Attendees Give Back Over $8,000 to Help Close Digital Divide in D.C.

/in /by

LEXINGTON, Ky., Wednesday, May 22, 2019 —The National Association of State Chief Information Officers (NASCIO) provided a $8,391 donation to Washington, D.C. based Byte Back. Donations were collected during the NASCIO Midyear Conference in National Harbor through the Give Back program to thank the host community. NASCIO state, corporate and nonprofit members donated $5,391 through individual contributions and NASCIO provided a $3,000 donation.

“Bridging the digital divide by empowering diverse students and building the future technology workforce are vital to the work of state CIOs,” said James Collins, NASCIO President and Delaware CIO. “I could not be more proud of the generosity of our members’ support of Byte Back in its efforts to help adult students become part of the digital economy and change the face of the tech sector.”

Byte Back is an organization that helps diverse adults who have been left behind by the digital divide build a foundation of computer skills, earn tech certifications and become part of the growing digital economy. Graduates who were hired in 2018 started earning $27,599 more per year than before Byte Back.

“The generosity of NASCIO and its members will help Byte Back students move up a pathway of free tech training and into living-wage careers. It means so much to feel the support from the IT sector – from our own Washington, DC CTO to leaders around the country. NASCIO has helped put tech within reach for a group of diverse, talented people. The impact on Byte Back graduates could last for a lifetime,” said Elizabeth Lindsey, Byte Back Executive Director.

To learn more about Byte Back, visit www.byteback.org.

The State CIO Operating Model: Managing Change in a Sustainable Way

/in /by

LEXINGTON, Ky., May 14, 2019 — The National Association of State Chief Information Officers (NASCIO), in partnership with Integris Applied, has released a fourth guide in a series on the topic of “multisourcing” and a new state CIO operating model. This playbook can be used by any state or territory to design a path towards a modern multi-supplier delivery model that supports the demands and forces placed on the state CIO.

“While each state and territory has its own unique governance structures and political circumstances, all state CIOs have a common and collective obligation to deliver intuitive, intelligent and elegant digital services to citizens,” said NASCIO President and Delaware CIO James Collins. “It is imperative that we foster a culture and service delivery models that enable digital government that is accessible any time, from anywhere and on any device.”

Developed through interviews with state CIOs and an extensive survey answered by 48 states, this playbook synthesizes a multi-year effort which includes three reports and a recorded webinar (all are available on www.nascio.org). In this modernized operating model, a highly disciplined state CIO organization proactively engages with state agencies, understands current and emerging program and citizen needs, maintains market awareness of current and emerging trends and offerings and communicates with stakeholders at all levels.

Patrick Moore, Integris Applied Managing Director and former state of Georgia CIO noted, “The role of the CIO has been changing for years. Leadership, empathy and the ability to articulate a vision are more important qualities than understanding the ins and outs of a data center. This “Playbook” is intended to help governors, legislatures and CIOs understand the state CIO’s evolving role and the critical role the CIO occupies in any government enterprise.”

In the 2018 State CIO Survey, when asked how CIO organizations plan to deliver or obtain IT services over the next three years, responses support the idea that CIOs are continuing to shift the business model by expanding more shared services, as-a-service models, IT shared services model and managed services model. Indeed, the CIO as broker operating model is the future, and, thus, a topic NASCIO will continue to address.

The report is available for download on NASCIO’s website www.nascio.org.

State CIOs Meet with Federal CIO and Advocate for Strengthening Federal-State Partnerships

/in /by

WASHINGTON, D.C. Wednesday, May 8, 2019 – Today, members of the National Association of State Chief Information Officers (NASCIO) met with Suzette Kent, the Federal Chief Information Officer of the United States, as well as strategic partners and federal officials from the Internal Revenue Service (IRS) Office of Safeguards, the Federal Bureau of Investigation Criminal Justice Information Services (FBI-CJIS), FirstNet, and the General Services Administration (GSA). NASCIO members advocated for increasing partnerships between the federal government and state governments and discussed the advancement of NASCIO’s federal advocacy priorities including the need to harmonize disparate and often conflicting federal cybersecurity regulations.

NASCIO president and Delaware CIO James Collins said, “we welcome the tremendous opportunity to engage with our federal and strategic partners and appreciate the good discussions today. We look forward to continued and fruitful partnerships.”

NASCIO members also engaged with representatives from the National Governors Association (NGA), the General Services Administration (GSA) and FirstNet. Representatives from NGA spoke to their respective organizational priorities, while GSA provided an update on their DotGov program.

NASCIO’s annual D.C. Fly-In convenes state CIOs and NASCIO’s federal and strategic partners for a day of advocacy and discussion related to current government affairs priorities related to recognizing the state CIO role in emerging technology, information sharing, and harmonizing federal cybersecurity regulations. It also serves as an opportunity for state CIOs to establish and strengthen key relationships with federal decision-makers. More information on NASCIO’s advocacy priorities can be found here: www.nascio.org/Advocacy.

NASCIO Technology Champion Award Honors Utah Governor Gary Herbert

/in /by

National Harbor, MD, Tuesday, May 7, 2019 — The National Association of State Chief Information Officers (NASCIO) has awarded Utah Governor Gary Herbert with the association’s 2019 Technology Champion Award. The announcement was made at the NASCIO 2019 Midyear Conference in National Harbor, MD.

For over 10 years, Governor Gary Herbert has exemplified leadership in public sector technology policy and practice. He has promoted improvements in aligning technology education with needs through his Governor’s Tech Pathways Program; expanded broadband services so that 96.6% of Utah households have access to broadband internet; championed digital government innovations which has led to greater savings and accesibility of government services; and underscored the importance of cybersecurity by opening the Utah Cyber Center in 2018.

“We thank Governor Herbert for his leadership, especially for his work as Chair of the National Governors’ Association. In that role he spearheaded a nationwide initiative which resulted in a repository of technology based solutions that are shared among states,” said James Collins, Delaware CIO and NASCIO President.

NASCIO created the Technology Champion Award in 2003 to recognize outstanding individual contributions to the field of information technology in the public sector. Recipients further NASCIO’s vision of a government in which the public is fully served through the efficient and effective use of technology policy.

Learn more about the NASCIO Technology Champion award and prior recipients at www.nascio.org/awards

NASCIO Releases Publication Highlighting State Chief Privacy Officer Role

/in /by

LEXINGTON, Ky., Wednesday, March 27, 2019 — The National Association of State Chief Information Officers (NASCIO) today released a publication titled “Perspectives on Privacy: A Survey and Snapshot of the Growing State Chief Privacy Officer Role.” NASCIO surveyed and interviewed 12 state chief privacy officers (CPOs) for the publication. The CPOs interviewed not only shared important information about their role but also provided advice for new CPOs or states considering developing the role.

“For several years there were only a handful of states that had an enterprise-wide chief privacy officer, but now, every few months, we hear of a state hiring their first CPO. This is a great time to highlight this role for states that are just getting started down this path,” said Jennifer Davis, Chief Privacy Officer for the State of Arkansas and Co-Chair of the NASCIO Privacy and Data Protection Working Group.

While every state has a Chief Information Security Officer, the Chief Privacy Officer Role has been growing over the last several years in state government. This NASCIO publication provides an overview of the way the states are structuring the role and a snapshot of the state CPO position including:

  • The most common titles and job responsibilities
  • Reporting structure
  • Degrees and certifications of CPOs
  • Information on defined budgets and authority

Read the policy brief at www.NASCIO.org/ResourceCenter.