NASCIO Pushes For Action on Cybersecurity; Endorses S. 1023

CIOs Commit to Working With Feds on Building Cyber Threat Information Sharing Network

WASHINGTON, D.C., April 29, 2015 — Today the National Association of State Chief Information Officers (NASCIO) endorsed the Cybersecurity Information Sharing Credit Act (S 1023). The legislation, introduced by Senators Jerry Moran (R-KS) and Kristen Gillibrand (D-NY) provides federal tax credits to private industry that participates in cybersecurity Information Sharing and Analysis Organizations (ISAOs) and fusion centers.

NASCIO announced its support at the association’s 2015 D.C. Fly-In, where more than 50 state CIOs and state technology policy officials met with federal officials and key stakeholders on national issues that impact state IT services. During the event, NASCIO members sat down with officials from the White House, Congress, and individuals throughout the administration in an effort to highlight cybersecurity issues in the states. 

“Most states, including Michigan, are already formally working as ISAOs and sharing cyber threat information with our key private sector partners,” explained David Behen, Co-chair of the NASCIO Security and Privacy Committee and CIO for the state of Michigan. “It is critical to establish partnerships between the public and private sectors on a regional basis in order to effectively and efficiently deter cyber threats.”

NASCIO members also met with the White House Cyber Security Coordinator Michael Daniel. The conversation focused on how states could work with the administration to increase information sharing on key cyber threats, as well as maturing and expanding cybersecurity programs.  State CIOs committed to growing the role of the states in sharing information among key public and private sector partners.

“State CIOs and their teams play a key role in securing state infrastructure against cyber threats,” said Stu Davis, president of NASCIO and CIO for the state of Ohio. “The sophistication of those threats are growing, and there are insufficient resources to meet them. It’s vital that we engage with our federal partners now to ensure we have the right structures in place. State governments—and our nation—are at risk.”

NASCIO Meets With FirstNet Regarding State Plans and Business Model

WASHINGTON, D.C., April 29, 2015  – Today NASCIO’s members met with the First Responder Network Authority (FirstNet) to discuss how states and FirstNet will proceed in planning and deploying a nationwide interoperable public safety broadband network.

NASCIO members expressed particular interest in looking at how state plans will be developed and presented to the states, as well as what the business model FirstNet chooses will mean for the sustainability of the network and potential impact to states as partners and customers.

“A positive and productive relationship between FirstNet and the states will be crucial for the viability of the network,” explained NASCIO Vice President and CIO for the state of New Mexico Darryl Ackley. “This is a tremendously large and ambitious undertaking; states and FirstNet need to be working towards unified goals with a common understanding of who has what responsibility.”

State CIOs met with FirstNet as part of NASCIO’s Washington, D.C. Fly-In. More than 50 State CIOs and state technology policy officials participated in NASCIO’s 2015 D.C. Fly-In, meeting with federal officials and key stakeholders on national issues that impact state IT services.

NASCIO Looks to Work With Federal CIO to Harmonize Agency Grant Rules

WASHINGTON, D.C., April 29, 2015 — Today members of the National Association of State Chief Information Officers (NASCIO) met with Federal CIO Tony Scott to discuss opportunities to work together to identify potential updates to and harmonization of existing federal agency rules that impact states’ use of information technology. State CIOs discussed with Scott federal program requirements and directives imposed by federal agencies that have unintentionally hindered state government efforts to modernize service channels, integrate program delivery, and achieve better outcomes for its citizens at lower cost. 

“State innovation is often derailed not only by technology rules that haven’t kept up with new IT business practices, but also inconsistent interpretation and application of them by federal agencies,” explained Stu Davis, president of NASCIO and CIO, state of Ohio. “We want to work with Mr. Scott and the federal government to harmonize grant requirements when it comes to information technology policy, and incentivize states to take cross jurisdictional and enterprise approaches to technology that result in cost reductions and improved services for citizens.” 

NASCIO members met with Scott at the association’s annual fly-in, where more than 50 state CIOs and state technology policy officials came together with federal officials and key stakeholders on national issues that impact state IT services.

Governor Kasich Recognized as NASCIO Technology Champion

ALEXANDRIA, Va., Tuesday, April 28, 2015 — The National Association of State Chief Information Officers (NASCIO) has awarded Governor John Kasich, state of Ohio, with the 2015 NASCIO Technology Champion (NTC) award. Kasich received recognition at the 2015 NASCIO Midyear Conference in Alexandria, Va. for his leadership in IT policy, initiatives, and practices.

NASCIO is pleased to present Governor Kasich with the 2015 NTC award, said Stu Davis, NASCIO president and Ohio CIO. The Governor's contributions to the state demonstrate his understanding of the importance of IT in enabling citizen service and effective government operations.

Kasich has reached a number of key milestones during his tenure as Governor including significant cost savings through network consolidation and optimization and improving public safety by upgrading first responder communication networks. Kasich also supported the establishment of a Technology Board to enhance enterprise IT alignment and ensure that agency interests are represented within the IT governance process.

Learn more about the NASCIO Technology Champion Award and prior recipients at www.nascio.org/awards/ntc.

 

NASCIO Issues a Call to Action for State CIOs on the IT Workforce

LEXINGTON, Ky., Thursday, April 16 — The National Association of State Chief Information Officers (NASCIO) today released a study on the current landscape of the state Information Technology (IT) workforce: State IT Workforce: Facing Reality with Innovation. The study includes survey data collected from 49 states and territories earlier this year and features findings and recommendations for state chief information officers (CIOs).
 
NASCIO has studied the issue of IT workforce for several years and released reports in 2007 and 2011 on the topic. Building upon these previous offerings, the 2015 report shines a light on the current landscape of the state IT workforce and includes candid feedback from state CIOs. The report also details innovative techniques state IT agencies are using to recruit and retain both entry level and highly skilled personnel.
 
The study is a presidential priority of NASCIO President Stu Davis, CIO, state of Ohio, who said, “for the first time in several years, ‘human resources/talent management’ made NASCIO’s “Top Ten” list for 2015—a compilation of top priorities for state CIOs. Therefore, we felt it was important to take a fresh look at the issue.” 
 
Key takeaways from the report include: 
  • Nearly 92 percent of states say salary rates and pay grade structures present a challenge in attracting and retaining IT talent.
  • 86 percent of states are having difficulty recruiting new employees to fill vacant IT positions.
  • 46 percent of states report that it is taking 3 to 5 months to fill senior level IT    positions.
  • A shortage of qualified candidates for state IT positions is hindering 66 percent of states from achieving strategic IT initiatives. 
  • Security is the skill that presents the greatest challenge in attracting and retaining IT employees.
Read the report at www.NASCIO.org/workforce.

California Offers Cloud Services to State Agencies: NASPO and NASCIO Provide a Case Study of the Technology Trend for State Governments

LEXINGTON, Ky., March 26, 2015 – In July of last year, the state of California launched a service that marked a dramatic shift in the way that state governments procure and provide cloud services to their consumers. This offering is the subject of a new case study published jointly today by the National Association of State Procurement Officials (NASPO) and the National Association of State Chief Information Officers (NASCIO).

California’s Cloud Infrastructure initiative is an on premise, private cloud service, procured through a competitive solicitation process, hosted by a third party solution partner and managed and housed at OTech (California Department of Technology) data centers. The initiative offers a virtual environment to OTech’s customers and features on-demand self-service, broad network access, resource pooling, rapid elasticity and measured service. California’s Cloud Infrastructure has received widespread attention in the state community because of its scope, stature, potential value and procurement approach.
Capitals in the Clouds: California’s Cloud Infrastructure Case Study includes information and advice from the trenches from Neeraj Chauhan, California’s Cloud Infrastructure Project Director, OTech, California Department of Technology; Carlos Ramos, Chief Information Officer, State of California; and Jim Butler, Chief Procurement Officer, State of California. It is the first in a series of planned publications to be released by NASPO and NASCIO that will examine information technology procurement projects in states. “As the leading authorities on state procurement and information technology in state government, our respective associations were able to work together to highlight how different areas of state government can collaborate to respond to emerging trends in infrastructure,” said Krista Ferrell, director of strategic programs at NASPO. “Our aim with this new case study is to provide practical information on successful procurement tactics that can help other state officials who are considering major information technology undertakings.”
“We are delighted to be working with NASPO on this case study series and believe the lessons learned and advice from the trenches will be invaluable to state CIOs as they procure services for their customers,” said Doug Robinson, NASCIO executive director.
The case study can be viewed here: www.nascio.org/CapClouds

NASCIO Releases Building Successful Relationships: State CIO Advice for IT Partners, a brief focusing on state CIO/IT partner relationships

LEXINGTON, Ky., Thursday, March 5 — The National Association of State Chief Information Officers (NASCIO) released a brief focusing on state CIO/IT partner relationships today. The NASCIO Corporate Leadership Council (a committee made up of NASCIO’s corporate members) interviewed State CIOs in 2014 to research best practices for IT partners when engaging with state CIOs.

Given today’s fiscal environment, states are turning to their IT partners to provide cost-effective delivery of citizen services. This brief focuses on the best strategies for IT partners to engage with state CIOs while building successful business relationships.

“As states face increasingly complex and often time-sensitive challenges, having an ecosystem of reliable and capable information technology partners is an imperative for success. Those CIOs and IT partners that work together to share ideas, best practices and emerging technologies are best able to respond to these challenges in an agile manner that produces results for the citizens. This paper helps identify some of those best practices,” said Microsoft’s Kim Nelson, who chaired the CLC during the project.

The five recommendations most widely agreed upon by State CIOs included being prepared, anticipating and understanding a state’s problems, knowing the best methods for securing and having meetings, developing and cultivating trust, and knowing how to use lobbyists effectively.

“The NASCIO Corporate Leadership Council, welcomes the opportunity to support the state CIOs by taking on meaningful projects like the creation of this brief. This was a chance to roll up our sleeves, research individual CIOs’ real world experience and gather our collective findings to produce this best-practice resource, valuable to inform both CIOs and corporate partners,” said current CLC Chair Pat Cummens of ESRI.

Read the brief at www.nascio.org/SuccessfulRelationships/

NASCIO Releases Federal Advocacy Priorities: Cybersecurity tops list, followed by modernizing regulations and collaborating on broadband projects

WASHINGTON, D.C., Tuesday, January 21 — The National Association of State Chief Information Officer’s (NASCIO) announced its 2015 federal advocacy priorities today. Cybersecurity is NASCIO’s top federal advocacy priority for 2015, followed by continuing to modernize federal regulations that hold back state innovation, and broadband projects for the public safety community and students.

More specifically, NASCIO will focus its advocacy for the year in the following areas:

1. Cybersecurity: Securing Public Networks, Readying the Nation

2. Modernize Outdated Federal Regulations Impacting State IT

3. Building a Sustainable Nationwide Public Safety Network

4. Collaboration on Broadband and Telecommunications

Fact sheets and additional details on the NASCIO’s 2015 federal advocacy priorities can be found at www.nascio.org/advocacy.

“Cybersecurity is a critical concern and priority for state CIOs,” explained NASCIO President Stuart Davis, Chief Information Officer for the State of Ohio. “Our nation must do more to combat the asymmetrical, sophisticated threats our government networks face on a daily basis.” NASCIO is seeking greater resources and collaboration from the federal government to mature information sharing and coordinated cyber threat response, as well as ensuring states have access to talented cybersecurity professionals and advanced cybersecurity tools.

NASCIO will also be working with federal officials to reduce regulatory burdens that limit flexible use of IT solutions at the state level. Federal agency rules often limit states’ abilities to promote shared solutions and integrated channels of services. Ultimately, this means more tax dollars from citizens for duplicative, less efficient services.

In addition, NASCIO will continue to participate in a national conversation on a number of broadband and telecommunications related issues, including continuing the planning of the FirstNet public safety broadband network, promoting broadband connections for schools and libraries, and proposed changes to the 1996 Telecommunications Act.

“As technology evolves and increasingly integrates itself into how government interacts with the public and does business, we naturally need to update federal laws and programs to reflect that reality,” explained Mitch Herckis, Director of Government Affairs for NASCIO. “NASCIO’s goal is to work with our federal partners to secure public networks and build information technology solutions that best serve citizens.”

The association’s federal advocacy priorities for the year are selected by its Executive Committee based on the intersection of the leading policy priorities of state CIOs (available at nascio.org/topten) and key opportunities to work with Congress and the executive branch.

NASCIO Applauds Congressional Action on Cybersecurity

LEXINGTON, KY. Friday, December 19, 2014 – The National Association of State Chief Information Officers (NASCIO) President Stu Davis, chief information officer for the State of Ohio, released the following statement regarding congressional action on cybersecurity legislation:

“NASCIO’s members are very pleased that the 113th Congress was able to take substantial and meaningful steps to secure our nation’s cyber infrastructure before adjourning. Cybersecurity remains the number one priority of state CIOs. The passage of the Cybersecurity Enhancement Act of 2014 (S. 1353), National Cybersecurity Protection Act of 2014 (S. 2519), and Federal Information Security Modernization Act of 2014 (S. 2521) will help develop the nation’s cyber workforce, codify crucial cybersecurity activities in the executive branch, and initiate much-needed reforms to outdated government data security regulations that currently create red tape and little else for the states.”

“According to the 2014 Deloitte-National Association of State Chief Information Officers (NASCIO) cybersecurity study, released October 1, insufficient funding, sophisticated threats, and shortage of skilled talent threaten security and put state governments at risk. Approximately 6 in 10 (61 percent) CISOs cited an increase in sophistication of threats, up from roughly half (52 percent) in 2012. The number citing a shortage of qualified cybersecurity professionals jumped from 46 percent in 2012 to 59 percent in 2014. The action by Congress may provide some initial support for correcting these trends.”

“Our organization is thankful for the hard work put in by Senators Rockefeller (D-WV), Thune (R-SD), Carper (D-DE), Coburn (R-OK), as well as Representatives McCaul (R-TX), Thompson (D-MS), Meehan (R-VA), and Clarke (D-NY), to pass this legislation. They need to be commended for their perseverance and dedication to this important issue.”

“NASCIO looks forward to working with the administration to implement these bills, as well as continuing to work with our allies in the 114th Congress to continue to improve our nation’s cybersecurity posture. The passage of these bills are a clear sign of the strong consensus that more must be done to improve our cybersecurity defenses. It is an excellent first step that will bring more cybersecurity professionals to all levels of government, improve information sharing and coordination between the public and private sector, and ensure we are all taking the right steps to secure our networks against the millions of attacks our state IT systems are fighting against each day.”

Collaboration — Funding ideas for delivering outcomes

Funding: The Drive Wheel for Cross-Jurisdictional Collaboration

LEXINGTON, Ky., Wednesday, December 10 — Increasing the quality and availability of citizen services through collaborative enterprise-wide and cross-enterprise collaboration is motivated by achieving a citizen centric outcome, a comprehensive view of the citizen, and organizing with consideration to life events, according to a report released today by the National Association of State Chief Information Officers (NASCIO). This motivation includes goals for increasing efficiency, effectiveness and capacity. The key to reaching outcomes is gaining initial and sustained funding. An “outcomes based” business case that fully accounts for all costs will help secure the necessary funding. The report, “Funding: The Drive Wheel for Cross-Jurisdictional Collaboration,” focuses on funding options. Visit www.nascio.org/2014FundingTheDriveWheel/ to read the report.

“In this report we look at a lot of funding options for IT and refer back to previous research we’ve done on this topic,” said Brenda Decker, co-chair for the NASCIO Cross-Jurisdictional Collaboration working group and chief information officer for the state of Nebraska. “We also make the case that understanding and clearly articulating all costs is an important part of the business case development and is essential prior to seeking funding.”

“This report rounds out our library of resources regarding cross-jurisdictional collaboration,” said Calvin Rhodes, co-chair of the NASCIO Cross-Jurisdictional Collaboration working group and chief information officer for the state of Georgia. “Funding is on the critical path to kicking off collaboration and sustaining it. That funding may be derived from a variety of sources creating essentially a funding basket.”