The State CIO Operating Model: Bridging Trends and Action

In this third in our series related to NASCIO’s “The CIO Operating System:  Managing Change in a Sustainable Way,” we explore a maturity model that can help state CIOs develop their organization and explain their leadership role to a broad stakeholder audience.  This paper creates a connection between trends and action and supports NASCIO’s mission to represent state CIOs in the evolving state government market.  The maturity model provides a set of milestones for states to strive toward.  Each maturity level is described using key characteristics.  This not only provides states with a way for assessing their current state but also assists in creating the next set of goals as they move up the maturity curve.  A ratings table is presented that provides a more detailed set of dimensions that characterize the new operating model.  The paper culminates with a short assessment of some the key learnings from a survey of the states that was conducted in the third quarter of 2018.

Download

State CIO Top Ten Policy and Technology Priorities for 2019

NASCIO conducts a survey of the state CIOs to identify and prioritize the top policy and technology issues facing state government. The CIOs top ten priorities are identified and used as input to NASCIO’s programs, planning for conference sessions, and publications.

 

Download 

 

 

A View from the Marketplace: What They Say About State IT Procurement

This document renews NASCIO’s call for IT acquisition reform and is a product of the NASCIO Roundtable on IT Procurement Innovation. The publication focuses on the role the private sector can play in the state IT acquisition process (not just the IT procurement process) and includes feedback from NASCIO’s private sector members as well as recommendations for all involved in the state IT acquisition process.

Download

2018 Deloitte-NASCIO Cybersecurity Study – States at Risk: Bold Plays for Change

Even as state government Chief Information Security Officers have increased their access to and communications with top leaders, the top three issues impacting states’ cybersecurity remain the same from past surveys – budget, talent and increasing cyber threats. These findings from the 2018 Deloitte-NASCIO Cybersecurity Study are a call for bold action to disrupt the status quo.

Download

State Archiving in the Digital Era: A Playbook for the Preservation of Electronic Records

States are creating digital records at a rapid and increasing pace. Many states are finding that they are unprepared to deal with the unique management and preservation issues that are related to digital archives. NASCIO, along with the Council of State Archivists created this playbook for the preservation of state electronic records. This document includes eleven plays that state officials should consider when working together toward the preservation of digital archives.

 

 

 

Download 

 

The 2018 State CIO Survey

As internal and external pressures continue to mount, state technology leaders say they are confident that by building strong teams and embracing new products and development processes, state IT departments will be able to improve how they serve government agencies and residents. Those and other factors contributed heavily to the 2018 State CIO Survey, State CIO as Communicator: The Evolving Nature of Technology Leadership. The survey includes responses from all 50 state CIOs on a range of issues, from evolving business models to workforce and budget to access to innovation and facing the future. Respondents to this year’s survey represent more than 150 years of collective service as a state’s top technology official.

Download

State Cybersecurity Governance Case Studies

In recognition of the importance of governance in addressing cyber risks, the U.S. Department of Homeland Security (DHS) partnered with the National Association of State Chief Information Officers (NASCIO) to develop a report and series of case studies exploring how states govern cybersecurity. The report and case studies explore how Georgia, Michigan, New Jersey, Virginia and Washington use cross-enterprise governance mechanisms (i.e., laws, policies, structures, and processes) across strategy and planning, budget and acquisition, risk identification and mitigation, incident response, information sharing, and workforce and education. The purpose of the report and case studies is to offer concepts and approaches to other states and organizations who face similar challenges. The report summarizes the case studies and identifies common trends in how cybersecurity governance is addressed across the five states, with supporting examples from each state.

 

Download

Cybersecurity Governance in the State of Washington

In recognition of the importance of governance in addressing cyber risks, the U.S. Department of Homeland Security (DHS) partnered with the National Association of State Chief Information Officers (NASCIO) to develop a report and series of case studies exploring how states govern cybersecurity. The report and case studies explore how Georgia, Michigan, New Jersey, Virginia and Washington use cross-enterprise governance mechanisms (i.e., laws, policies, structures, and processes) across strategy and planning, budget and acquisition, risk identification and mitigation, incident response, information sharing, and workforce and education. The purpose of the report and case studies is to offer concepts and approaches to other states and organizations who face similar challenges. The report summarizes the case studies and identifies common trends in how cybersecurity governance is addressed across the five states, with supporting examples from each state.

 

Download

Cybersecurity Governance in the Commonwealth of Virginia

In recognition of the importance of governance in addressing cyber risks, the U.S. Department of Homeland Security (DHS) partnered with the National Association of State Chief Information Officers (NASCIO) to develop a report and series of case studies exploring how states govern cybersecurity. The report and case studies explore how Georgia, Michigan, New Jersey, Virginia and Washington use cross-enterprise governance mechanisms (i.e., laws, policies, structures, and processes) across strategy and planning, budget and acquisition, risk identification and mitigation, incident response, information sharing, and workforce and education. The purpose of the report and case studies is to offer concepts and approaches to other states and organizations who face similar challenges. The report summarizes the case studies and identifies common trends in how cybersecurity governance is addressed across the five states, with supporting examples from each state.

 

Download

Cybersecurity Governance in the State of New Jersey

In recognition of the importance of governance in addressing cyber risks, the U.S. Department of Homeland Security (DHS) partnered with the National Association of State Chief Information Officers (NASCIO) to develop a report and series of case studies exploring how states govern cybersecurity. The report and case studies explore how Georgia, Michigan, New Jersey, Virginia and Washington use cross-enterprise governance mechanisms (i.e., laws, policies, structures, and processes) across strategy and planning, budget and acquisition, risk identification and mitigation, incident response, information sharing, and workforce and education. The purpose of the report and case studies is to offer concepts and approaches to other states and organizations who face similar challenges. The report summarizes the case studies and identifies common trends in how cybersecurity governance is addressed across the five states, with supporting examples from each state.
 

Download