NASCIO Executive Committee Member Sills Appointed to U.S. Global Advisory Committee

LEXINGTON, Ky., Tuesday, April 15 – The National Association of State Chief Information Officer’s (NASCIO) is honored to announce that Jim Sills, NASCIO Executive Committee Director and Delaware Cabinet Secretary and CIO, was appointed to serve as the new NASCIO representative to the Global Justice Information Sharing Initiative (Global) Advisory Committee (GAC). Representing NASCIO, state CIOs have served on Global for more than a dozen years.

GAC operates under the support and leadership auspices of the Bureau of Justice Assistance (BJA), Office of Justice Programs (OJP), U.S. Department of Justice (DOJ). Sills will serve alongside more than 30 independent organizations spanning the spectrum of justice- and public safety-interested constituencies. Member organizations participate in Global out of shared responsibility and a shared belief that, together, they can bring about positive change in interorganizational communication and data sharing. 

“It’s an honor to be appointed to serve on the GAC,” said Sills. “I look forward to learning from other members, and sharing some insights and best practices on technologies, such as cloud, mobile, security, and business intelligence. As the NASCIO representative, it’s my goal to help drive the conversation on how to improve data sharing among this outstanding group of federal criminal justice and public partners.”

The GAC advises the nation’s highest-ranking law enforcement officer—the U.S. Attorney General—on information sharing issues. The GAC also assists member organizations and the people they serve through a series of important initiatives, making the Committee a critical voice across all justice-interested disciplines, at every level of government. Global recommends the development and promulgation of technology standards and architectures such as the National Information Exchange Model (NIEM). NASCIO is an ardent supporter of NIEM and advocates for its adoptions at the state and local level. See NASCIO’s statement of support here.

Cloud Procurement: Before You Sign on the Dotted Line

The National Association of State Chief Information Officers (NASCIO) has released an issue brief focusing on state cloud procurement. The NASCIO Procurement Modernization Committee, in partnership with TechAmerica and the National Association of State Procurement Officials, continue to focus on state IT procurement reforms and highlight best practices at the state level. The publication, “Capitals in the Clouds Part VI: Cloud Procurement: From Solicitation to Signing,” is now available at https://www.nascio.org/publications/

As first reported in the NASCIO/TechAmerica/Grant Thornton 2013 State CIO Survey, The Enterprise Imperative: Leading Through Governance, Portfolio Management, and Collaboration, states continue to turn to cloud solutions, with services such as email and storage remaining the most popular. In fact, 74 percent of respondents said their state has some applications in the cloud.

Alex Pettit, co-chair of the NASCIO Procurement Modernization Committee and chief information officer for the state of Oregon said, “In just a few short years, cloud offerings have become one of the most popular ways CIOs can procure services for their states. With these new services come procurement challenges that CIOs must address.”

For several years now, NASCIO has discussed the transition in the state information technology environment as state CIOs sought new approaches to traditional delivery models. The recession prompted state leaders to examine new approaches and leverage technology opportunities. The use of cloud services by state government is the most obvious manifestation of this transition. In 2011, NASCIO launched its “Capitals in the Clouds” series on this topic. Three years later, states continue to investigate and to leverage cloud solutions, software as a service (SaaS) and infrastructure as a service, with services such as email and data storage remaining the most popular.

Gale Given, co-chair of the NASCIO Procurement Modernization Committee and chief information officer for the state of West Virginia said, “Embracing cloud services within states shows an eye-opening shift in how states procure information technology services and products. Adapting to this change won’t happen overnight.”

May we split the check please? Sharing Costs in Cross Jurisdictional Collaboratives

LEXINGTON, Ky., Wednesday, March 5, 2014 — States and local government are joining up to save money and leverage economies of scale in operations to deliver better government services. The recipe for successful cross-jurisdictional collaborations have been explored by NASCIO in its report titled, “What Makes Collaborative Initiatives Work?” Often the primary incentive to forming a collaborative is cost sharing. NASCIO continues to build its portfolio of publications and references with a new release highlighting cost sharing. A list of essential design elements for cost sharing is presented along with examples of successful collaboratives. The publication is available at www.nascio.org/publications

“NASCIO is a strong proponent for cross jurisdictional collaboratives. We believe collaborative arrangements will be successful if they are starting with the right vision and then develop an architecture that is deliberately designed to support that vision. One of the foundational elements of that architecture is cost sharing,” said Calvin Rhodes, co-chair of the NASCIO Cross-Jurisdictional Collaboration working group and chief information officer for the state of Georgia.

Cost sharing must be designed for sustainability, anticipating ongoing change. That change will include changes in demands for services. That demand includes demand for new services as well as changing demands for existing services. There may be changes in costs along the entire supply chain, and there may be new methods for delivering services. These dynamics require an ongoing discipline or process for anticipation, evaluation and implementation of necessary changes to maintain an equitable and effective cost sharing model.

“The most effective collaboratives are arrangements that are successful at partnering. That partnering aspect requires understanding the motivations and needs of the member organizations,” said Brenda Decker, co-chair for the NASCIO Cross-Jurisdictional Collaboration working group and chief information officer for the state of Nebraska. “Those member needs are often met through non-financial contributions. An effective collaborative and an effective cost sharing model for supporting it will account for a variety of member contributions including in-kind contributions. We maintain a state-wide or often regional view of economics when we develop these types of comprehensive cost sharing models. A great example of partnering is our Network Nebraska Cost Recovery Model which is highlighted in this report.”

NASCIO Member Appointed to U.S. Department of the Interior’s National Geospatial Advisory Committee

LEXINGTON, Ky., Tuesday, March 4, 2014 — the National Association of State Chief Information Officers (NASCIO) announced that Steven Emanuel, New Jersey’s chief information officer and NASCIO member, was appointed to the National Geospatial Advisory Committee.

Emanuel is among 17 new and continuing members to the National Geospatial Advisory Committee (NGAC), appointed by the Secretary of the Interior, Sally Jewell. The advisory committee provides recommendations on geospatial policy and management issues to the Federal Geographic Data Committee, the interagency executive group responsible for providing leadership and direction in federal geospatial programs.

“I am honored to be appointed to the National Geospatial Advisory Committee representing the state CIO community,” said Steven Emanuel, chief information officer, state of New Jersey.

The NGAC includes up to 30 members, selected to achieve a balanced representation of the varied interests associated with geospatial programs and technology. NGAC members are appointed to serve staggered terms on the committee. Additional information about the NGAC, including a complete list of the committee members, is available at www.fgdc.gov/ngac

NASCIO Supports Adoption of the NIST Cybersecurity Framework

LEXINGTON, Ky., Wednesday, February 12 — NASCIO applauds the Administration for publishing a consensus-based, voluntary Cybersecurity Framework. The Framework provides states with a common platform on which to base strategic security decisions, allocate resources, and build defenses against both common and sophisticated attacks. The Framework provides a common language for all levels of government and their partners in the private sector to perform risk analysis and detail their security efforts.

Today’s release is a critical step in a process the President began a year ago when he signed an Executive Order that brought federal leadership to a major vulnerability in our national security infrastructure. The inclusion of a methodology to protect privacy and personal information is also valuable for states, which are responsible for storing sensitive information on citizens and businesses. This addition is a welcome refinement to the final framework.

Similarly to the private sector, state governments are at risk from a host of diverse and changing security threats that require a formal strategy, adequate resources, and constant vigilance. In response, states are actively working to increase their cyber readiness. Over three-quarters of states have adopted some cybersecurity framework based on national standards and guidelines, with the vast majority utilizing National Institute of Standards and Technology (NIST) standards to some degree.

NASCIO thanks the Administration for the collaborative process that led up to the creation of the cybersecurity framework. Our members hope to continue to collaborate with NIST and the Department of Homeland Security to create a state and local government overlay for the cybersecurity framework that will provide additional specificity by including the federal laws and regulations with which states and localities must comply.

NASCIO will be encouraging states to adopt the framework as a common language in which to build a strategic cybersecurity plan that provides leadership and stakeholders a better understanding of the security stance within state governments.

This is not the end, but the beginning of a process, and both states and our federal partners still have significant work to do in this area. Advancing common security and information sharing, protocols, such as National Information Exchange Model (NIEM), will be important to securing public sector data while still allowing it to flow between various sectors of government. In addition, Congress and the Administration must work to reform the Federal Information Security Management Act of 2002 (FISMA). By streamlining requirements to meet end goals rather than checklists, we can provide greater services to citizens and more secure state data networks.

NASCIO Addresses the State Procurement RFP Process Rethinking the Dynamics of the RFP Process for Improved IT Procurement

LEXINGTON, Ky., Thursday, February 6 — The National Association of State Chief Information Officers (NASCIO) released an issue brief focusing on the state information technology (IT) procurement RFP process. The NASCIO Procurement Modernization Committee, in partnership with TechAmerica and the National Association of State Procurement Officials, continues to focus on state IT procurement reforms and highlight best practices at the state level. The brief, “Rethinking the Dynamics of the RFP Process for Improved IT Procurement” is the fourth in a series of recommendations set forth by this collaborative.

In NASCIO’s 2013 State CIO Survey, we asked CIOs to rate the effectiveness of the procurement process used by states in acquiring best value information technology (IT) goods and services in a timely manner. Almost two-thirds of CIOs believe their IT procurement process is either somewhat or very ineffective. One of the most frequently cited concerns is the length of time required to complete a procurement.

The RFP process is multifaceted with a broad set of stakeholders including state CIOs, agency heads, state procurement officials, state procurement attorneys, private sector vendors, and many others. Taking this information into consideration, NASCIO has continually sought ways to encourage collaboration between CIOs, chief procurement officials and private IT sector vendors. As such, NASCIO identified the RFP process as one to which special attention must be paid.

Alex Pettit, co-chair of the NASCIO Procurement Modernization Committee and Chief Information Officer for the state of Oregon said, “the RFP process is such an important part of the procurement process yet oftentimes takes a backseat to other aspects of the process.”

For more information and to view the issue brief, visit www.nascio.org/publications/

NASCIO Releases Federal Priorities: Cybersecurity, FirstNet, and Collaboration on IT are Essential for States

WASHINGTON, D.C., Thursday, January 23 — The National Association of State Chief Information Officer’s (NASCIO) released its 2014 federal advocacy priorities today. NASCIO’s advocacy goals for 2014 include: collaborating with the federal government on cybersecurity to secure the public sector; building a nationwide public safety broadband network; pushing greater information sharing among government entities; and, implementation of grant guidance reform.

The 2014 Federal Advocacy Priorities are now available https://www.nascio.org/advocacy/current/.

NASCIO’s 2014 advocacy goals are supported by four key issues that must be addressed to succeed in these areas: maturing identity management, building the public sector IT workforce, promoting common data standards, and collaboration on broadband.

“Information Technology is a rapidly evolving field,” explained NASCIO President Craig Orgeron, chief information officer for the state of Mississippi. “While progress was made in 2013 with the release of federal grant guidance reform and a sweeping Executive Order on cybersecurity, there is still a long road ahead. Congress has yet to act on this vital issue, and the Administration must continue to work with state partners to modernize and secure government information technology.”

State CIOs are also looking to continue their collaboration with the FirstNet Authority, responsible for building a nationwide public safety network for our first responders, and other federal partners, on building a nationwide public safety broadband communications network. “NASCIO hopes building a business plan with the states will be the number one priority for FirstNet in 2014,” said Mitch Herckis, director of Government Affairs for NASCIO. “It is the missing keystone and necessary next step towards the roll out of our nation’s largest infrastructure project since the Interstate System.”

NASCIO also hopes to highlight the need to build information sharing procedures and policies at all levels. Projects such as implementation of the voluntary cybersecurity framework and FirstNet will require a major effort to create consensus on how and when information is shared between government entities and private sector partners. Congress, the administration, state governments, and private sector partners will all need to work in partnership to build common languages and solutions in this field.

NASCIO Endorses Data Privacy Day

LEXINGTON, Ky., Tuesday, January 14 — the National Association of State Chief Information Officers (NASCIO) is joining the growing effort among international organizations, corporations, educational institutions, government entities and municipalities across the globe to promote privacy awareness. Data Privacy Day, observed annually on January 28, is an international effort to empower and educate people to protect their privacy and control their digital footprint.

NASCIO supports Data Privacy Day as a Champion, recognizing the principle that organizations, businesses and government all share the responsibility to be conscientious stewards of data by respecting privacy, safeguarding data and enabling trust. Data Privacy Day encourages Internet users to consider the privacy implications of their online actions and motivate all companies to make the protection of privacy and data a greater priority.

“Security, including the protection of data, was voted the number one state CIO priority of 2014,” stated Craig Orgeron, NASCIO president and Mississippi chief information officer. “Essential to the role of state CIOs is implementing the necessary security protocols and measures that support privacy policies, protecting the personally identifiable information of citizens.”

Coordinated and led by the National Cyber Security Alliance (NCSA), Data Privacy Day began in the United States and Canada in January 2008 as an extension of the Data Protection Day celebration in Europe. The day, January 28, commemorates the 1981 signing of Convention 108, the first legally binding international treaty dealing with privacy and data protection. For more information about Data Privacy Day, the DPD Champions program, and how to participate in DPD activities, visit http://www.staysafeonline.org/data-privacy-day/

About Data Privacy Day
Led by the National Cyber Security Alliance, Data Privacy Day began in the United States and Canada in January 2008 as an extension of the Data Protection Day celebration in Europe. The Day commemorates the 1981 signing of Convention 108 – the first legally binding international treaty dealing with privacy and data protection. Intel and Microsoft are Leading Sponsors of Data Privacy Day. ADP and AT&T are Contributing Sponsors and Small Business sponsors include Private Wi-Fi, Reputation.com and SpiderOak. 

Destination: Advancing Enterprise Portfolio Management – First Stop: Issues Management

LEXINGTON, Ky., Thursday, December 12 — the National Association of State Chief Information Officers (NASCIO) today released the first in a series of issue briefs on Enterprise Portfolio Management. The publication is now available at www.nascio.org/publications/.

State CIOs are managing a growing and diverse set of investments, services and collaborative arrangements. Enterprise portfolio management (EPM) is a discipline that provides the tools and best practices necessary for doing this proactively and successfully. EPM provides a view into the enterprise – not only projects, but also services, operations, programs and resources. EPM essentially turns enterprise architecture into action. EPM involves many portfolios. The first portfolio that drives the others is the portfolio of issues that identifies, scores and prioritizes the very issues we’re trying to solve through projects, programs, management initiatives and operations.

“We’re kicking off our series on portfolio management and IT investment management with a foundational piece on issues,” said Jack Doane, co-chair for the NASCIO Enterprise Architecture and Governance Committee and director for the Information Services Division in Alabama. “Everything we do starts with a business need, or an issue. It is at that beginning where we need to initiate a discipline for evaluating and prioritizing the demand side. That is the issues portfolio. We need to be deliberate in deciding what to tackle – what to tackle alone – and what to tackle in collaboration with another agency or jurisdiction.”

“The state CIO manages a number of portfolios,” said Carolyn Parnell, co-chair for the NASCIO Enterprise Architecture and Governance Committee and chief information officer for the State of Minnesota. “While there may be some inconsistencies in how these portfolios are managed today, our ability to build discipline and consistency across the board is growing. Enterprise portfolio management is maturing. And we’ll see that maturity reflected in both the demand side and supply side of project management. As we consider options for delivering successful projects we also have more viable options today including cross-jurisdictional collaboration. These are all elements of the enterprise-wide portfolio.”

NASCIO Releases State CIO and Legal Counsel: Joining Forces for Better Government

LEXINGTON, Ky., Tuesday, November 26 — the National Association of State Chief Information Officers (NASCIO) today released a guide on building a good state chief information officers (CIO)/legal counsel relationship.

On a daily basis, a number of situations may arise where a state chief information officer (CIO) and legal counsel need to work together. Procurement and contract negotiations, privacy, cybersecurity, personnel actions and litigation including e-discovery are just some of the issues for which having a good working relationship is mutually beneficial.

“In the fast paced and challenging world of state CIOs, it’s imperative they forge trusted relationships,” said Doug Robinson, NASCIO executive director. “The legal counsel can be a trusted ally to provide advice and address the inevitable bumps in the road.”

The NASCIO Legal Advisory Committee, with contributions from some veteran state CIOs and legal counsel came up with the checklist. This practical guide is intended for newbie and seasoned legal counsel and CIOs. For more information and to view the checklist, please visit https://www.nascio.org/publications/