Resource Guide For State Cybersecurity Awareness ... uide For State Cybersecurity Awareness, Education and Training Initiaties Background In support of the 12th annual National Cybersecurity

  • View
    213

  • Download
    1

Embed Size (px)

Text of Resource Guide For State Cybersecurity Awareness ... uide For State Cybersecurity Awareness,...

  • Resource Guide For State Cybersecurity Awareness, Education and Training Initiatives

  • Resource Guide For State Cybersecurity Awareness, Education and Training Initiatives

    www.nascio.org

    Background

    In support of the 12th annual National Cybersecurity Awareness Month, the National Association of State Chief Information Officers (NASCIO) has partnered with the Department of Homeland Securitys Office of Cybersecurity and Communications, the Multi-State Information Sharing and Analysis Center (MS-ISAC), and the National Cybersecurity Alliance (NCSA), to promote governments commitment to securing cyberspace and protecting the citizens who rely on Internet technologies in their daily activities.

    Each of these organizations has developed extensive security awareness resources and toolkits that are available through their websites, and links to those and other resources are provided on NASCIOs Cybersecurity Awareness page.

    State CIOs and the programs they administer have supported cybersecurity awareness month from its inception, and states address IT security and privacy awareness, education, and training on a year-round basis.

    For the 2015 observance, NASCIO has updated its Resource Guide for State Cybersecurity Awareness, Education, and Training Initiatives. The guide includes new information from our state members, who provided examples of state awareness programs and initiatives. This is an additional resource of best-practice information, together with an interactive state map to allow users to drill-down to the actual resources that states have developed or are using to promote cyber awareness. It includes contact information for the CISO, hyperlinks to state security and security awareness pages, and information describing cybersecurity awareness, training, and education initiatives.

    The Resource Guide is a modifiable work that should provide a valuable reference resource for Cybersecurity Awareness Month, as well as the ongoing planning of security awareness and training efforts state programs may undertake thereafter.

    www.nascio.org

  • Resource Guide For State Cybersecurity Awareness, Education and Training Initiatives

    www.nascio.org

    AlabamaAlaskaArizonaArkansasCaliforniaColoradoConnecticutDelawareFloridaGeorgiaHawaiiIdahoIllinoisIndianaIowaKansasKentuckyLouisianaMaineMarylandMassachusettsMichiganMinnesotaMississippiMissouriMontanaNebraskaNevadaNew HampshireNew JerseyNew MexicoNew YorkNorth CarolinaNorth Dakota

    OhioOklahomaOregonPennsylvaniaRhode IslandSouth CarolinaSouth DakotaTennesseeTexasU.S. Virgin IslandsUtahVermontVirginiaWashingtonWest VirginiaWisconsinWyoming

    123456781011121314151617181920212223242627282930313233 343536

    3738464749505152535455565759606263

    Table of Contents

    www.nascio.org

  • Resource Guide For State Cybersecurity Awareness, Education and Training Initiatives

    www.nascio.org

    1

    AlabamaAlabama CISO: Brad Bird; brad.Bird@isd.alabama.gov; 334.353.3373Alabama Cybersecurity Webpage: www.cybersecurity.alabama.gov

    Alabamas focus on Cybersecurity can be seen in several initiatives this year:

    Development of Statewide Security Program Management Plano Focus on Policy and Standards alignment with NIST RMFo Establishment of centralized Governance, Risk, and Compliance managemento Establishment of centralized Plan of Action and Milestones

    Expansion of Awareness & Training initiativeo End User Security Awareness trainingo Specialized Role based Security Training

    Expansion of Incident Response capabilityo Event and Incident Correlationo Event and Incident Management

    Alabama is working to mature security at all levels within the state: security program, personnel, systems, agencies, etc. Also, Alabama plans to widen communication channels with internal and external entities (i.e. Alabama Fusion Center, etc.) in order to broaden the information and intelligence sharing that goes on in Alabama state government.

    www.nascio.orgmailto:brad.Bird@isd.alabama.govhttp://www.cybersecurity.alabama.gov

  • Resource Guide For State Cybersecurity Awareness, Education and Training Initiatives

    www.nascio.org

    2

    AlaskaAlaska CISO: Chris Letterman; Chris.Letterman@alaska.gov Alaska Cybersecurity Operations: Jay Druyvestein; Jay.Druyvestein@alaska.govAlaska Security Awareness Webpage: security.alaska.gov/SA_Bulletins/index.html State Security Office: security.alaska.gov/ SOA Security Training: security.alaska.gov/training/index.html

    Cybersecurity Awareness and Training Resources and Initiatives for 2015: Governor Bill Walker will be approached to issue a Proclamation of October 2015 as Cyber

    Security Awareness Month. Alaskas Governors have shown support for Cybersecurity by issuing this proclamation annually.

    Alaskas Security Office and Enterprise Technology Services will take steps in observance of National Cyber Security Awareness Month by hosting contact events throughout the month of October addressing information security topics. In addition to focusing on managers and security practioners, a new Cybersecurity Awareness Training curriculum is planned for launch during October with the objective of advancing cyber-safety skills of our end users. This is the states first step to mandatory Cybersecurity Training for all Executive Branch employees.

    October is the target month for completion and release of its internal security policy refresh which will largely incorporate the NIST Cybersecurity Framework. Begun in March 2015, the effort was a collaborative project between Alaskas Security Office and several agency representatives who served on the review committee.

    The MS-ISAC Cybersecurity toolkit materials will be distributed throughout state government offices during the month of October.

    www.nascio.orgmailto:Chris.Letterman@alaska.govmailto:Jay.Druyvestein@alaska.govhttp://security.alaska.gov/SA_Bulletins/index.htmlhttp://security.alaska.gov/http://security.alaska.gov/training/index.html

  • Resource Guide For State Cybersecurity Awareness, Education and Training Initiatives

    www.nascio.org

    3

    ArizonaArizona CISO: Mike Lettman; mike.lettman@azdoa.gov; 602.542.0030Arizona CPO: Darrell Davis; Darrell.davis@azdoa.gov; 602.542.5409Arizona Cybersecurity Awareness Coordinator: Ed Yeargain; ed.yeargain@azdoa.gov; 602.542.1837

    The state of Arizona will be hosting the following events for National Cybersecurity Awareness Month:

    Cybersecurity Presentations available to the Agencies during October Agencies conducting CBT cyber awareness training during October Creating Cybersecurity Awareness webpage for Agencies, business and citizens Information Security Policy awareness training Distribution of MS-ISAC cybersecurity awareness toolkit Conducting Kids Cyber Awareness Poster contest for K 12 during October/November Begin new marketing campaign for Cybersecurity Awareness Conduct an Industrial Control System (ICS) Cyber Exercise for public and private partners Conduct lunch and learns at agencies on different days Conduct a half day cyber awareness seminar for State Employees to attend

    www.nascio.orgmailto:mike.lettman@azdoa.govmailto:Darrell.davis@azdoa.govmailto:ed.yeargain@azdoa.gov

  • Resource Guide For State Cybersecurity Awareness, Education and Training Initiatives

    www.nascio.org

    4

    ArkansasArkansas CISO: Frank Andrews; franklin.andrews@arkansas.gov Arkansas IT Security Homepage: www.dis.arkansas.gov/security/Pages/default.aspx Arkansas Cybersecurity Toolkit: www.dis.arkansas.gov/security/Pages/CyberSecurityToolkit.aspx

    Arkansas has several activities planned in preparation of National Cyber Security Awareness Month:

    Kick off for new monthly online cybersecurity training Handing out cybersecurity educational materials Governors Proclamation for National Cybersecurity Awareness Week

    www.nascio.orgmailto:franklin.andrews@arkansas.govhttp://www.dis.arkansas.gov/security/Pages/default.aspxhttp://www.dis.arkansas.gov/security/Pages/CyberSecurityToolkit.aspx

  • Resource Guide For State Cybersecurity Awareness, Education and Training Initiatives

    www.nascio.org

    5

    CaliforniaCalifornia CISO: Michele Robinson; Michele.Robinson@state.ca.gov ; 916.445.5239California Information Security Office: www.infosecurity.ca.gov California Cybersecurity Symposium: www.pspinfo.us/psp-events/css2015California Security Awareness Webpage: www.cio.ca.gov/OIS/Government/library/default.aspCalifornia Department of Justice, Office of the Attorney General, Privacy Enforcement and Protection Unit: www.privacy.ca.gov/

    www.nascio.orgmailto:Michele.Robinson@state.ca.govhttp://www.infosecurity.ca.govhttp://www.pspinfo.us/psp-events/css2015http://www.cio.ca.gov/OIS/Government/library/default.asphttp://www.privacy.ca.gov/

  • Resource Guide For State Cybersecurity Awareness, Education and Training Initiatives

    www.nascio.org

    6

    ColoradoColorado CISO: Deborah Blyth; deborah.blyth@state.co.us Office of Information Security website URL:www.colorado.gov/cs/Satellite/OIT-Cyber/CBON/1249667675596Cybersecurity Awareness Resources: www.colorado.gov/cs/Satellite/OIT-Cyber/CBON/1251575408776Information Security Toolkit: www.colorado.gov/cs/Satellite/OIT-Cyber/CBON/1251575408811

    The State of Colorado will be hosting the following events for National Cybersecurity Awareness Month:

    CyberGirlz: Regis University will be conducting workshops to prepare middle-school and high-school girls for careers in cybersecurity, during the months of September and October this program is called CyberGirlz, and will culminate in a cyber event on October 24. The Governors Office of Information Technology (OIT) will be providing mentors and coaches