Whats New

1
Whats New!

• Presented by Colleen Pedroza

2
Little Hoover Commission Report

• Recommendation
• Move information security component of OISPP
  under OCIO.
• Privacy component will remain with State and
  Consumer Services Agency
• Reasoning to ensure the state can integrate a
  standard strategy for information security
  throughout all of its IT programs and streamline
  the approval process for technology projects.

3
OISPPs Email Distribution List Subject Line
Structure

• Subject line introductions and examples for their
  use
• FYI forms updates, guidance documents,
  newsletters
• SITUATIONAL AWARENESS Early warning about
  actual or potential threats
• ACTION REQUIRED SIMM follow-up/due, remediation
  supplemental/status required
• IMMEDIATE ACTION REQUIRED Critical and out of
  Band updates, patches, vulnerabilities
• NO ACTION REQUIRED Acknowledgement receipts,
  Disaster Recovery Plan submission meets
  requirement
• POLICY ANNOUNCEMENT New or revised policy
  releases
• TRAINING ANNOUNCEMENT Training

4
Data Exchange Policy Enhancement and Guide

• Results from a state and local government
  workgroup
• Proposed policy enhancements will require state
  agencies to establish agreements for
• data exchange/use
• systems interconnections
• service levels
• Establishing Agreements for Data Exchange (SIMM
  65E) will provide guidance and model templates
• Vetting proposed MM, policy enhancements, and
  SIMM 65E.
• Anticipated implementation date February/March
  2009

5
Recent Information Sheets

• Telework Security Considerations
• Does Your Agency Implement Forced Password
  Changes?
• Forthcoming
• Refresher Course on Password Use
• Security Considerations for Multi-Function
  Devices (MFD)
• Dont forget about the Secure Coding Guidance, too

6
Information Security Leader Academy (ISLA)

• OISPP Collaboration with Sacramento State
  University
• Scheduled for May 2009
• Six Months Long 2 days per month
• 60 Technical / 40 Leadership
• Class Project
• Many Benefits

7
Training Opportunities

• January 21, 2009 - DTS Quarterly Security Forum
• February 5, 2009 - 930-11am - Ethical Hacking
• March 16th 20th, 2009 CISSP CBK Review
• Coming Soon More Federally Sponsored Training
• Incident Response
• Incident Detection and Deterrence
• MS-ISAC Cyber Security Computer-Based Training
• Community Cyber Security Maturity Model (CCSMM)
  Opportunity

8
Questions?