NASCIO Endorses State and Local Government Cybersecurity Act of 2019

WASHINGTON, D.C., Thursday, July 11, 2019 —The National Association of State Chief Information Officers (NASCIO) today endorsed S. 1846, the State and Local Government Cybersecurity Act of 2019. Introduced by Senators Gary Peters (D-MI) and Rob Portman (R-OH), the legislation amends the Homeland Security Act of 2002 to provide for engagements with state, local, tribal and territorial governments.

Specifically, S. 1846 provides for additional federal grant opportunities to state, local and tribal governments to safeguard against cyber threats. It also strives to make serious efforts to strengthen the communication between the Department of Homeland Security (DHS) and state and local officials to combat a myriad of cybersecurity threats. S. 1846 further codifies the coordination between DHS and the Multi-State Information Sharing and Analysis Center (MS-ISAC). Additionally, the legislation includes a proposed pilot deployment of enhanced capabilities to state and local governments to identify and filter malicious network traffic, which is currently only available to federal agencies.

NASCIO President and Delaware CIO James Collins lauded the introduction of S. 1846 saying, “states are the primary agents for delivering a host of critically important federally funded services on behalf of the federal government. For our CIOs and CISOs, this legislation would provide them with additional tools, resources and expertise to counteract a continuous barrage of cyber threats. We urge the Senate to pass S. 1846.”

The State and Local Government Cybersecurity Act of 2019 was introduced in the United States Senate in June and referred to the Senate Committee on Homeland Security and Governmental Affairs.

NASCIO Conference Attendees Give Back Over $8,000 to Help Close Digital Divide in D.C.

LEXINGTON, Ky., Wednesday, May 22, 2019 —The National Association of State Chief Information Officers (NASCIO) provided a $8,391 donation to Washington, D.C. based Byte Back. Donations were collected during the NASCIO Midyear Conference in National Harbor through the Give Back program to thank the host community. NASCIO state, corporate and nonprofit members donated $5,391 through individual contributions and NASCIO provided a $3,000 donation.

“Bridging the digital divide by empowering diverse students and building the future technology workforce are vital to the work of state CIOs,” said James Collins, NASCIO President and Delaware CIO. “I could not be more proud of the generosity of our members’ support of Byte Back in its efforts to help adult students become part of the digital economy and change the face of the tech sector.”

Byte Back is an organization that helps diverse adults who have been left behind by the digital divide build a foundation of computer skills, earn tech certifications and become part of the growing digital economy. Graduates who were hired in 2018 started earning $27,599 more per year than before Byte Back.

“The generosity of NASCIO and its members will help Byte Back students move up a pathway of free tech training and into living-wage careers. It means so much to feel the support from the IT sector – from our own Washington, DC CTO to leaders around the country. NASCIO has helped put tech within reach for a group of diverse, talented people. The impact on Byte Back graduates could last for a lifetime,” said Elizabeth Lindsey, Byte Back Executive Director.

To learn more about Byte Back, visit www.byteback.org.

The State CIO Operating Model: Managing Change in a Sustainable Way

LEXINGTON, Ky., May 14, 2019 — The National Association of State Chief Information Officers (NASCIO), in partnership with Integris Applied, has released a fourth guide in a series on the topic of “multisourcing” and a new state CIO operating model. This playbook can be used by any state or territory to design a path towards a modern multi-supplier delivery model that supports the demands and forces placed on the state CIO.

“While each state and territory has its own unique governance structures and political circumstances, all state CIOs have a common and collective obligation to deliver intuitive, intelligent and elegant digital services to citizens,” said NASCIO President and Delaware CIO James Collins. “It is imperative that we foster a culture and service delivery models that enable digital government that is accessible any time, from anywhere and on any device.”

Developed through interviews with state CIOs and an extensive survey answered by 48 states, this playbook synthesizes a multi-year effort which includes three reports and a recorded webinar (all are available on www.nascio.org). In this modernized operating model, a highly disciplined state CIO organization proactively engages with state agencies, understands current and emerging program and citizen needs, maintains market awareness of current and emerging trends and offerings and communicates with stakeholders at all levels.

Patrick Moore, Integris Applied Managing Director and former state of Georgia CIO noted, “The role of the CIO has been changing for years. Leadership, empathy and the ability to articulate a vision are more important qualities than understanding the ins and outs of a data center. This “Playbook” is intended to help governors, legislatures and CIOs understand the state CIO’s evolving role and the critical role the CIO occupies in any government enterprise.”

In the 2018 State CIO Survey, when asked how CIO organizations plan to deliver or obtain IT services over the next three years, responses support the idea that CIOs are continuing to shift the business model by expanding more shared services, as-a-service models, IT shared services model and managed services model. Indeed, the CIO as broker operating model is the future, and, thus, a topic NASCIO will continue to address.

The report is available for download on NASCIO’s website www.nascio.org.

State CIOs Meet with Federal CIO and Advocate for Strengthening Federal-State Partnerships

WASHINGTON, D.C. Wednesday, May 8, 2019 – Today, members of the National Association of State Chief Information Officers (NASCIO) met with Suzette Kent, the Federal Chief Information Officer of the United States, as well as strategic partners and federal officials from the Internal Revenue Service (IRS) Office of Safeguards, the Federal Bureau of Investigation Criminal Justice Information Services (FBI-CJIS), FirstNet, and the General Services Administration (GSA). NASCIO members advocated for increasing partnerships between the federal government and state governments and discussed the advancement of NASCIO’s federal advocacy priorities including the need to harmonize disparate and often conflicting federal cybersecurity regulations.

NASCIO president and Delaware CIO James Collins said, “we welcome the tremendous opportunity to engage with our federal and strategic partners and appreciate the good discussions today. We look forward to continued and fruitful partnerships.”

NASCIO members also engaged with representatives from the National Governors Association (NGA), the General Services Administration (GSA) and FirstNet. Representatives from NGA spoke to their respective organizational priorities, while GSA provided an update on their DotGov program.

NASCIO’s annual D.C. Fly-In convenes state CIOs and NASCIO’s federal and strategic partners for a day of advocacy and discussion related to current government affairs priorities related to recognizing the state CIO role in emerging technology, information sharing, and harmonizing federal cybersecurity regulations. It also serves as an opportunity for state CIOs to establish and strengthen key relationships with federal decision-makers. More information on NASCIO’s advocacy priorities can be found here: www.nascio.org/Advocacy.

NASCIO Technology Champion Award Honors Utah Governor Gary Herbert

National Harbor, MD, Tuesday, May 7, 2019 — The National Association of State Chief Information Officers (NASCIO) has awarded Utah Governor Gary Herbert with the association’s 2019 Technology Champion Award. The announcement was made at the NASCIO 2019 Midyear Conference in National Harbor, MD.

For over 10 years, Governor Gary Herbert has exemplified leadership in public sector technology policy and practice. He has promoted improvements in aligning technology education with needs through his Governor’s Tech Pathways Program; expanded broadband services so that 96.6% of Utah households have access to broadband internet; championed digital government innovations which has led to greater savings and accesibility of government services; and underscored the importance of cybersecurity by opening the Utah Cyber Center in 2018.

“We thank Governor Herbert for his leadership, especially for his work as Chair of the National Governors’ Association. In that role he spearheaded a nationwide initiative which resulted in a repository of technology based solutions that are shared among states,” said James Collins, Delaware CIO and NASCIO President.

NASCIO created the Technology Champion Award in 2003 to recognize outstanding individual contributions to the field of information technology in the public sector. Recipients further NASCIO’s vision of a government in which the public is fully served through the efficient and effective use of technology policy.

Learn more about the NASCIO Technology Champion award and prior recipients at www.nascio.org/awards

NASCIO Releases Publication Highlighting State Chief Privacy Officer Role

LEXINGTON, Ky., Wednesday, March 27, 2019 — The National Association of State Chief Information Officers (NASCIO) today released a publication titled “Perspectives on Privacy: A Survey and Snapshot of the Growing State Chief Privacy Officer Role.” NASCIO surveyed and interviewed 12 state chief privacy officers (CPOs) for the publication. The CPOs interviewed not only shared important information about their role but also provided advice for new CPOs or states considering developing the role.

“For several years there were only a handful of states that had an enterprise-wide chief privacy officer, but now, every few months, we hear of a state hiring their first CPO. This is a great time to highlight this role for states that are just getting started down this path,” said Jennifer Davis, Chief Privacy Officer for the State of Arkansas and Co-Chair of the NASCIO Privacy and Data Protection Working Group.

While every state has a Chief Information Security Officer, the Chief Privacy Officer Role has been growing over the last several years in state government. This NASCIO publication provides an overview of the way the states are structuring the role and a snapshot of the state CPO position including:

  • The most common titles and job responsibilities
  • Reporting structure
  • Degrees and certifications of CPOs
  • Information on defined budgets and authority

Read the policy brief at www.NASCIO.org/ResourceCenter.

NASCIO Opposes Contractor Monitoring Software Legislation

LEXINGTON, Ky., February 21, 2019 — The National Association of State Chief Information Officers (NASCIO), which represents state CIOs, opposes state legislation which would mandate contractor monitoring software because of the significant risks to citizen privacy and federal regulatory compliance concerns it could create. While NASCIO certainly supports contractor productivity, cost efficiency and successful project outcomes, legislation of this nature could introduce unnecessary risks to citizen data by essentially transferring ownership of private citizen data to a third party. This type of legislation also has the potential for unintended consequences, such as impacting a state’s cybersecurity insurance policy coverage. State CIOs inherently understand and appreciate the seriousness of protecting citizens’ data, and therefore do not support legislation that could serve to increase or introduce additional risk.

The State CIO Operating Model: Bridging Trends and Action

LEXINGTON, Ky., February 6, 2019 — The National Association of State Chief Information Officers (NASCIO) has released a third report in a series on the topic of “multisourcing” and a new state CIO operating model. This paper presents a maturity model and a set of dimensions that describe the journey along that maturity curve. Multisourcing encompasses several dimensions from cost accountability to operational competence using a new operating model. NASCIO’s multisourcing initiative is intended to guide and inform states and to provide best practices and a maturity assessment to assist states in managing a multisourcing environment.

Dr. Craig Orgeron, Co-Chair of the NASCIO Enterprise Architecture & Governance Committee and Chief Information Officer for the state of Mississippi stated, “We are all on this journey, and granted, we’re moving at a different cadence and emphasizing different aspects of this new operating model within our own states. However, we’re all moving in the same direction. In this report we’re presenting guidance on the target destination and some of the key maturity levels we can expect to experience in that journey.”

“The new operating model we’re describing through this effort is critical to the mission of state government. It is comprehensive and complex,” stated Eric Boyette, Co-Chair of the NASCIO Enterprise Architecture & Governance Committee and Chief Information Officer for the state of North Carolina. “Pulling together multiple stakeholder groups, managing the technology stream coming from the market and delivering positive citizen outcomes requires a very high level of discipline.”

NASCIO will continue its research through 2019 with a new working group. Next on the agenda is a playbook for the new CIO Operating Model.

The report is available for download on NASCIO’s website NASCIO.org/ResourceCenter.

Matt Pincus Joins NASCIO as Director of Government Affairs

LEXINGTON, Ky., January 30, 2019 — Matt Pincus has joined the National Association of State Chief Information Officers (NASCIO) as the director of government affairs. In this role, Pincus will be responsible for advancing NASCIO’s federal advocacy agenda, policy positions and strengthening the association’s alliances with key strategic partners. He will also work to ensure state chief information officer perspectives are represented in shaping federal legislation and policies on key state IT issues.

“Matt’s background and experience will perfectly situate him to help advance NASCIO’s federal affairs activities,” said Doug Robinson, NASCIO executive director. “I’m happy to welcome him to NASCIO.”

Pincus most recently served as deputy legislative director at the National Guard Association of the United States having previously served as a legislative assistant in the United States House of Representatives. He has a master’s degree in global security studies from Johns Hopkins University and an undergraduate degree from Skidmore College.

Pincus will be located in NASCIO’s Washington DC office at the Hall of States, 444 North Capitol Ave NW, Suite 642, Washington, DC 20001. He can be reached at [email protected].

To learn more about NASCIO’s government affairs and advocacy, including recently released 2019 federal advocacy priorities, visit www.nascio.org/advocacy.

NASCIO Champions Data Privacy Day 2019

LEXINGTON, Ky., January 28, 2018 — The National Association of State Chief Information Officers (NASCIO) has again announced its support of Data Privacy Day ‒ an international effort held annually on January 28 to create awareness about the importance of respecting privacy, safeguarding data and enabling trust – by signing up as a Data Privacy Day 2019 Champion. As a Champion, NASCIO recognizes and supports the principle that all organizations share the responsibility of being conscientious stewards of personal information.

Data Privacy Day is part of a greater campaign that promotes awareness of the importance of privacy, highlights easy ways to protect personal information and reminds organizations that privacy is good for business. NASCIO joins the growing global effort among nonprofits, academic institutions, corporations, government entities, municipalities and individuals to raise awareness at home, at work and school and in their communities. Through collaboration and unified, consistent messaging about privacy and protecting personal information, all Data Privacy Day Champions are working toward the common goal of improving individual and business consciousness toward respecting privacy, safeguarding data and enabling trust.

“In today’s digital world, privacy awareness is growing in state government and we are seeing an increasing number of states developing privacy programs and looking to hire privacy professionals. Events like Data Privacy Day are important for raising awareness around these issues,” said Arkansas Chief Privacy Officer and NASCIO Privacy and Data Protection co-chair Jennifer Davis.

In addition to becoming a DPD Champion, NASCIO continues to maintain its Privacy and Data Protection Working Group, which was formed in 2016. This group highlights privacy issues of importance to state CIOs and their teams. The working group is a subcommittee of the NASCIO Cybersecurity Committee.

In North America, the Data Privacy Day initiative is officially led by the National Cyber Security Alliance (NCSA), a nonprofit, public-private partnership dedicated to promoting a safer, more secure and more trusted internet. For more information about getting involved in Data Privacy Day and becoming a Champion, visit staysafeonline.org/data-privacy-day. You can also follow NCSA on Facebook and Twitter for updates and resources and use the official hashtag #PrivacyAware to join the conversation.