Buyer Be Aware: Integrating Cybersecurity into the Acquisition Process

This publication is a joint release between NASCIO, the Center for Internet Security (CIS) and the National Association of State Procurement Officials (NASPO) and addresses steps state governments should take to ensure cybersecurity is an integral part of the acquisition process. The publication also calls for a strong partnership between the CIO office, CISO office, procurement office, state agencies and the private sector. The publication includes a list of recommendations aimed at assisting state governments in fully integrating cybersecurity into the acquisition process.

Download

An Introduction to the National Information Exchange Model

This presentation provides an overview of NIEM, the motivation behind the creation of it, the domains of government that are included, and the benefits that can be gained by employing it.

Katherine Escobar, Managing Director for the NIEM Program Management Office, provides an introduction to NIEM including the challenges facing state, local, territorial and tribal governments in sharing information across government lines of business.

NASCIO has a long history supporting the NIEM initiative.  This is a revisit of the benefits of NIEM and how to get started.

Slide Deck

Watch the Recording 

Additional information about NIEM is available on the following websites:

  • The NIEM website
  • “What is NIEM” An introduction to NIEM–a common vocabulary that enables efficient information exchange across diverse public and private organizations.
  • NASCIO NIEM resources – For additional NASCIO resources related to NIEM, search on the term “NIEM” using our search tool
  • “In Hot Pursuit – Achieving Interoperability Through XML”  Part 1 and Part 2 – this video references XML but NIEM is much more than a set of XML schemas.  

 

2021 Technology Forecast: Agility, Resiliency, and Uncertainty

This popular, annual webinar, presented by CompTIA-PTI and NASCIO, provides an overview of the pressing technology issues that will be impacting state and local governments for the coming year.

Doug Robinson, Executive Director, NASCIO, and Alan Shark, Executive Director, PTI will share their views of the technology landscape based on recent research activities and conversations with state and local government technology leaders.

Slide Deck

Watch the Recording 

State CIO Top Ten Policy and Technology Priorities for 2021

NASCIO conducts a survey of the state CIOs to identify and prioritize the top policy and technology issues facing state government. The CIOs top ten priorities are identified and used as input to NASCIO’s programs, planning for conference sessions, and publications.

Download

2020 Deloitte-NASCIO Cybersecurity Study – States at Risk: The Cybersecurity Imperative in Uncertain Times

The sixth biennial Deloitte-NASCIO Cybersecurity Study reflects insights from all 50 states and 1 territory on the CISO’s role and budget, governance, reporting, workforce and operations. The CISOs filled out this year’s survey in May/June 2020—an unprecedented time as the world adjusted to the impact of the COVID-19 pandemic. State governments responded by moving their enterprise operations, services and employees to a virtual environment, and the study captures COVID-19’s impact on state cyber posture to the extent visible during the early response to the pandemic.

Download

The 2020 State CIO Survey

2020 is a year that has undoubtedly been defined by the COVID-19 pandemic. In this eleventh annual state chief information officer (CIO) survey, we received the perspective of 47 state and territory CIOs on the extraordinary and unprecedented challenges they faced this year. In addition to directly addressing the issues and lessons learned by CIOs in responding to the pandemic, we also received updates from CIOs on many of the tradi­tional topics covered by the survey, including CIO organization business models, digital government, adoption of cloud and emerging technologies and state and local collaboration. As might be expect­ed, there was not a single topic area where the pandemic did not impact state CIO experiences in some way. The continuing work to address the immediate challenges of COVID-19 and to prepare for the long-term impacts to state and citizen work and personal lives is reflected throughout this year’s survey.

Download

State Governments at Risk: 2020 Cybersecurity Study

Cybersecurity is consistently ranked as a primary concern for state governments. This session will highlight key findings of the 2020 Deloitte-NASCIO Cybersecurity Study.

Watch the Recording 

Deep Dive Session: Dedicated Federal Cyber Funding

Building the Business Case: Securing Funds During the Pandemic
Across the country, state governments are experiencing mixed success securing federal funding to support them during the COVID-19 pandemic. Watch this session for actionable insights into prioritizing the security risks created by remote working and digitization, and how to apply for the funding you need to mitigate them.

Watch the Recording 

Deep Dive Session: Securing Work From Home

Cyber Security and Privacy: Securing the Remote Workforce
As cyber-attacks continue to grow in both frequency and scope across all levels of government and with the sudden shift to remote work, tracking threat actors, including those sponsored by nation states and financially motivated criminal operations, becomes increasingly challenging. The State of Maine and FireEye discuss challenges states are facing, solutions that are working and strategies to strengthen a state’s security posture.

Watch the Recording 

Deep Dive Session: State & Local Cybersecurity Collaboration

Centralized Cybersecurity for a More Resilient Response
In 2016 New Jersey transitioned responsibility for cybersecurity from the NJ Office of Information Technology to the NJ Office of Homeland Security and Preparedness. This whole of state approach has helped them have a centralized coordination of cybersecurity and as the state see it as a team sport. NJ is made more resilient from cyber attacks and strongly recommends that other states centralize their cybersecurity mission. Join Michael Geraghty, CISO, State of New Jersey & Director, NJ Cybersecurity and Communications Integration Cell and James Yeager, VP, Public Sector & Healthcare, CrowdStrike as they discuss the challenges overcome and successes found in this centralized, collaborative method of cybersecurity.

Watch the Recording