NASCIO Announces Finalists for 2019 NASCIO State IT Recognition Awards

/in /by

The National Association of State Chief Information Officers (NASCIO) has selected 30 finalists across 10 categories for the State IT Recognition Awards. Projects and initiatives from NASCIO member states and territories were eligible for nomination. NASCIO members served as volunteer judges to review the over 130 submissions, narrowing the nominees down to finalists in each category. From these finalists, a recipient from each category will be announced during an awards dinner at the upcoming NASCIO Annual Conference this October in Nashville, TN.

The award nominations showcase the use of information technology to address critical business problems, more easily connect citizens to their government, improve business processes and create new opportunities that improve the lives of citizens. To ensure states have access to the innovations and leading practices of their peers, all award submissions will be added to NASCIO’s awards library by late September.

Award finalists for the 2019 State IT Recognition Awards are:

Business Process Innovations 
State of Michigan: JobNet: Road to the Future 
State of North Carolina: Modernizing Estuarine Habitat Mapping with Unmanned Aerial Vehicles  
State of Tennessee: MHSAS’s Electronic Clinical Record, Using IT to Provide Better Patient Care 

Cross-Boundary Collaboration & Partnerships 
State of Georgia: Georgia Cyber Center 
State of Indiana: Connecting Indiana’s Medicaid and Corrections Data to Improve Hoosier Health 
State of North Carolina: Improving Emergency Response Precision with the State Emergency Response Application  

Cybersecurity 
State of Iowa: Election Cybersecurity Partnership Project 
State of Ohio: Digital Identity: Providing a Secure Customer Experience 
State of Texas: Managed Security Services – Provided by Texas for Texas Governments 

Data Management, Analytics & Visualization 
State of Connecticut: Cross Agency Data Sharing to Drive Value and Save Money 
State of Illinois: Winning Against Tax Fraud with Data Analytics 
State of Utah: Intergenerational Poverty Initiative Data Driven Solutions 

Digital Government: Government to Business 
State of Minnesota: Preparing for Emergencies: Medical PreCheck & Locator App 
State of North Carolina: Improving Health Outcomes through the State Health Information Exchange 
State of Tennessee: Rip, Replace, Revitalize! Project TR3 

Digital Government: Government to Citizen 
State of North Carolina: Women, Infants and Children Benefits in the Mobile Application Age 
Commonwealth of Pennsylvania: Child Support Enforcement System (PACSES) and JobGateway Integration Initiative 
State of Tennessee: TennCare Connect: A Multi-Channel Gateway Elevating the Member Experience  

Emerging & Innovative Technologies  
State of New Jersey: Integrated Drug Awareness Dashboard (IDAD) 
State of Tennessee: Halt, Who Goes There? Tennessee’s Facial Recognition System (FRS) Project 
State of Washington: Using UAS Technology in Collision and Crime Scene Reconstruction 

Enterprise IT Management Initiatives 
State of Arizona: Building the Governance Model 
State of California: Examination and Certification Online System (ECOS) 
Commonwealth of Pennsylvania: Pennsylvania IT and HR Shared Services Transformation 

Information Communications Technology (ICT) Innovations  
State of California: Identification and Removal of Hazardous Materials During Wildfire Response 
State of Georgia: Mobile Field Data Collection for Food Emergency Response 
State of Oklahoma: Oklahoma Videoconferencing Solution Saves Time for Citizens and State Employees 

State CIO Office Special Recognition 
State of California: Licensing Medicinal Adult-Use Cannabis 
State of Idaho: Instant Invoice Payments by Text Message and/or Email 
​State of Washington: Sexual Assault Kit Tracking System 

CISA, MS-ISAC, NGA & NASCIO Recommend Immediate Action to Safeguard Against Ransomware Attacks

/in /by

Take the First Three Steps to Resilience Against Ransomware for State and Local Partners

The recent ransomware attacks targeting systems across the country are the latest in a string of attacks affecting State and local government partners. The growing number of such attacks highlights the critical importance of making cyber preparedness a priority and taking the necessary steps to secure our networks against adversaries. Prevention is the most effective defense against ransomware.

The Cybersecurity and Infrastructure Security Agency (CISA), Multi-State Information Sharing and Analysis Center (MS-ISAC), National Governors Association (NGA), and the National Association of State Chief Information Officers (NASCIO) are committed to supporting ransomware victims and encouraging all levels of government to proactively protect their networks against the threat of a ransomware attack. Today, we call on our State, local, territorial and tribal government partners, along with the wider cyber community, to take the following essential actions to enhance their defensive posture against ransomware. Through this collective action, we can better protect ourselves and our communities, and further advance the cyber preparedness and resilience of the Nation.

Three Steps to Resilience Against Ransomware:

  1. Back-Up Your Systems – Now (and Daily)
    Immediately and regularly back up all critical agency and system configuration information on a separate device and store the back-ups offline, verifying their integrity and restoration process. If recovering after an attack, restore a stronger system than you lost, fully patched and updated to the latest version.
  2. Reinforce Basic Cybersecurity Awareness and Education
    Ransomware attacks often require the human element to succeed. Refresh employee training on recognizing cyber threats, phishing and suspicious links – the most common vectors for ransomware attacks. Remind employees of how to report incidents to appropriate IT staff in a timely manner, which should include out-of-band communication paths.
  3. Revisit and Refine Cyber Incident Response Plans
    ​Agencies must have a clear plan to address attacks when they occur, including when internal capabilities are overwhelmed. Make sure response plans include how to request assistance from external cyber first responders, such as state agencies, CISA and the MS-ISAC, in the event of an attack.

Additional Resources

After implementing these recommendations, refer to the ransomware best practices published by CISA, MS-ISAC, NGA, and NASCIO for additional steps to protect your organization.

Download PDF

NASCIO Endorses State and Local Government Cybersecurity Act of 2019

/in /by

WASHINGTON, D.C., Thursday, July 11, 2019 —The National Association of State Chief Information Officers (NASCIO) today endorsed S. 1846, the State and Local Government Cybersecurity Act of 2019. Introduced by Senators Gary Peters (D-MI) and Rob Portman (R-OH), the legislation amends the Homeland Security Act of 2002 to provide for engagements with state, local, tribal and territorial governments.

Specifically, S. 1846 provides for additional federal grant opportunities to state, local and tribal governments to safeguard against cyber threats. It also strives to make serious efforts to strengthen the communication between the Department of Homeland Security (DHS) and state and local officials to combat a myriad of cybersecurity threats. S. 1846 further codifies the coordination between DHS and the Multi-State Information Sharing and Analysis Center (MS-ISAC). Additionally, the legislation includes a proposed pilot deployment of enhanced capabilities to state and local governments to identify and filter malicious network traffic, which is currently only available to federal agencies.

NASCIO President and Delaware CIO James Collins lauded the introduction of S. 1846 saying, “states are the primary agents for delivering a host of critically important federally funded services on behalf of the federal government. For our CIOs and CISOs, this legislation would provide them with additional tools, resources and expertise to counteract a continuous barrage of cyber threats. We urge the Senate to pass S. 1846.”

The State and Local Government Cybersecurity Act of 2019 was introduced in the United States Senate in June and referred to the Senate Committee on Homeland Security and Governmental Affairs.

NASCIO Conference Attendees Give Back Over $8,000 to Help Close Digital Divide in D.C.

/in /by

LEXINGTON, Ky., Wednesday, May 22, 2019 —The National Association of State Chief Information Officers (NASCIO) provided a $8,391 donation to Washington, D.C. based Byte Back. Donations were collected during the NASCIO Midyear Conference in National Harbor through the Give Back program to thank the host community. NASCIO state, corporate and nonprofit members donated $5,391 through individual contributions and NASCIO provided a $3,000 donation.

“Bridging the digital divide by empowering diverse students and building the future technology workforce are vital to the work of state CIOs,” said James Collins, NASCIO President and Delaware CIO. “I could not be more proud of the generosity of our members’ support of Byte Back in its efforts to help adult students become part of the digital economy and change the face of the tech sector.”

Byte Back is an organization that helps diverse adults who have been left behind by the digital divide build a foundation of computer skills, earn tech certifications and become part of the growing digital economy. Graduates who were hired in 2018 started earning $27,599 more per year than before Byte Back.

“The generosity of NASCIO and its members will help Byte Back students move up a pathway of free tech training and into living-wage careers. It means so much to feel the support from the IT sector – from our own Washington, DC CTO to leaders around the country. NASCIO has helped put tech within reach for a group of diverse, talented people. The impact on Byte Back graduates could last for a lifetime,” said Elizabeth Lindsey, Byte Back Executive Director.

To learn more about Byte Back, visit www.byteback.org.

The State CIO Operating Model: Managing Change in a Sustainable Way

/in /by

LEXINGTON, Ky., May 14, 2019 — The National Association of State Chief Information Officers (NASCIO), in partnership with Integris Applied, has released a fourth guide in a series on the topic of “multisourcing” and a new state CIO operating model. This playbook can be used by any state or territory to design a path towards a modern multi-supplier delivery model that supports the demands and forces placed on the state CIO.

“While each state and territory has its own unique governance structures and political circumstances, all state CIOs have a common and collective obligation to deliver intuitive, intelligent and elegant digital services to citizens,” said NASCIO President and Delaware CIO James Collins. “It is imperative that we foster a culture and service delivery models that enable digital government that is accessible any time, from anywhere and on any device.”

Developed through interviews with state CIOs and an extensive survey answered by 48 states, this playbook synthesizes a multi-year effort which includes three reports and a recorded webinar (all are available on www.nascio.org). In this modernized operating model, a highly disciplined state CIO organization proactively engages with state agencies, understands current and emerging program and citizen needs, maintains market awareness of current and emerging trends and offerings and communicates with stakeholders at all levels.

Patrick Moore, Integris Applied Managing Director and former state of Georgia CIO noted, “The role of the CIO has been changing for years. Leadership, empathy and the ability to articulate a vision are more important qualities than understanding the ins and outs of a data center. This “Playbook” is intended to help governors, legislatures and CIOs understand the state CIO’s evolving role and the critical role the CIO occupies in any government enterprise.”

In the 2018 State CIO Survey, when asked how CIO organizations plan to deliver or obtain IT services over the next three years, responses support the idea that CIOs are continuing to shift the business model by expanding more shared services, as-a-service models, IT shared services model and managed services model. Indeed, the CIO as broker operating model is the future, and, thus, a topic NASCIO will continue to address.

The report is available for download on NASCIO’s website www.nascio.org.

State CIOs Meet with Federal CIO and Advocate for Strengthening Federal-State Partnerships

/in /by

WASHINGTON, D.C. Wednesday, May 8, 2019 – Today, members of the National Association of State Chief Information Officers (NASCIO) met with Suzette Kent, the Federal Chief Information Officer of the United States, as well as strategic partners and federal officials from the Internal Revenue Service (IRS) Office of Safeguards, the Federal Bureau of Investigation Criminal Justice Information Services (FBI-CJIS), FirstNet, and the General Services Administration (GSA). NASCIO members advocated for increasing partnerships between the federal government and state governments and discussed the advancement of NASCIO’s federal advocacy priorities including the need to harmonize disparate and often conflicting federal cybersecurity regulations.

NASCIO president and Delaware CIO James Collins said, “we welcome the tremendous opportunity to engage with our federal and strategic partners and appreciate the good discussions today. We look forward to continued and fruitful partnerships.”

NASCIO members also engaged with representatives from the National Governors Association (NGA), the General Services Administration (GSA) and FirstNet. Representatives from NGA spoke to their respective organizational priorities, while GSA provided an update on their DotGov program.

NASCIO’s annual D.C. Fly-In convenes state CIOs and NASCIO’s federal and strategic partners for a day of advocacy and discussion related to current government affairs priorities related to recognizing the state CIO role in emerging technology, information sharing, and harmonizing federal cybersecurity regulations. It also serves as an opportunity for state CIOs to establish and strengthen key relationships with federal decision-makers. More information on NASCIO’s advocacy priorities can be found here: www.nascio.org/Advocacy.

NASCIO Technology Champion Award Honors Utah Governor Gary Herbert

/in /by

National Harbor, MD, Tuesday, May 7, 2019 — The National Association of State Chief Information Officers (NASCIO) has awarded Utah Governor Gary Herbert with the association’s 2019 Technology Champion Award. The announcement was made at the NASCIO 2019 Midyear Conference in National Harbor, MD.

For over 10 years, Governor Gary Herbert has exemplified leadership in public sector technology policy and practice. He has promoted improvements in aligning technology education with needs through his Governor’s Tech Pathways Program; expanded broadband services so that 96.6% of Utah households have access to broadband internet; championed digital government innovations which has led to greater savings and accesibility of government services; and underscored the importance of cybersecurity by opening the Utah Cyber Center in 2018.

“We thank Governor Herbert for his leadership, especially for his work as Chair of the National Governors’ Association. In that role he spearheaded a nationwide initiative which resulted in a repository of technology based solutions that are shared among states,” said James Collins, Delaware CIO and NASCIO President.

NASCIO created the Technology Champion Award in 2003 to recognize outstanding individual contributions to the field of information technology in the public sector. Recipients further NASCIO’s vision of a government in which the public is fully served through the efficient and effective use of technology policy.

Learn more about the NASCIO Technology Champion award and prior recipients at www.nascio.org/awards

NASCIO Releases Publication Highlighting State Chief Privacy Officer Role

/in /by

LEXINGTON, Ky., Wednesday, March 27, 2019 — The National Association of State Chief Information Officers (NASCIO) today released a publication titled “Perspectives on Privacy: A Survey and Snapshot of the Growing State Chief Privacy Officer Role.” NASCIO surveyed and interviewed 12 state chief privacy officers (CPOs) for the publication. The CPOs interviewed not only shared important information about their role but also provided advice for new CPOs or states considering developing the role.

“For several years there were only a handful of states that had an enterprise-wide chief privacy officer, but now, every few months, we hear of a state hiring their first CPO. This is a great time to highlight this role for states that are just getting started down this path,” said Jennifer Davis, Chief Privacy Officer for the State of Arkansas and Co-Chair of the NASCIO Privacy and Data Protection Working Group.

While every state has a Chief Information Security Officer, the Chief Privacy Officer Role has been growing over the last several years in state government. This NASCIO publication provides an overview of the way the states are structuring the role and a snapshot of the state CPO position including:

  • The most common titles and job responsibilities
  • Reporting structure
  • Degrees and certifications of CPOs
  • Information on defined budgets and authority

Read the policy brief at www.NASCIO.org/ResourceCenter.

NASCIO Opposes Contractor Monitoring Software Legislation

/in /by

LEXINGTON, Ky., February 21, 2019 — The National Association of State Chief Information Officers (NASCIO), which represents state CIOs, opposes state legislation which would mandate contractor monitoring software because of the significant risks to citizen privacy and federal regulatory compliance concerns it could create. While NASCIO certainly supports contractor productivity, cost efficiency and successful project outcomes, legislation of this nature could introduce unnecessary risks to citizen data by essentially transferring ownership of private citizen data to a third party. This type of legislation also has the potential for unintended consequences, such as impacting a state’s cybersecurity insurance policy coverage. State CIOs inherently understand and appreciate the seriousness of protecting citizens’ data, and therefore do not support legislation that could serve to increase or introduce additional risk.

The State CIO Operating Model: Bridging Trends and Action

/in /by

LEXINGTON, Ky., February 6, 2019 — The National Association of State Chief Information Officers (NASCIO) has released a third report in a series on the topic of “multisourcing” and a new state CIO operating model. This paper presents a maturity model and a set of dimensions that describe the journey along that maturity curve. Multisourcing encompasses several dimensions from cost accountability to operational competence using a new operating model. NASCIO’s multisourcing initiative is intended to guide and inform states and to provide best practices and a maturity assessment to assist states in managing a multisourcing environment.

Dr. Craig Orgeron, Co-Chair of the NASCIO Enterprise Architecture & Governance Committee and Chief Information Officer for the state of Mississippi stated, “We are all on this journey, and granted, we’re moving at a different cadence and emphasizing different aspects of this new operating model within our own states. However, we’re all moving in the same direction. In this report we’re presenting guidance on the target destination and some of the key maturity levels we can expect to experience in that journey.”

“The new operating model we’re describing through this effort is critical to the mission of state government. It is comprehensive and complex,” stated Eric Boyette, Co-Chair of the NASCIO Enterprise Architecture & Governance Committee and Chief Information Officer for the state of North Carolina. “Pulling together multiple stakeholder groups, managing the technology stream coming from the market and delivering positive citizen outcomes requires a very high level of discipline.”

NASCIO will continue its research through 2019 with a new working group. Next on the agenda is a playbook for the new CIO Operating Model.

The report is available for download on NASCIO’s website NASCIO.org/ResourceCenter.