You've been at the session, now here are the slides

1. When Bad Things Happen
to Good Governments

2. ü The
Year
of
the
Breach
ü Real-­‐Time
Response
I
(Panel)
ü The
Cases:
2
You
Know,
2
You
Don’t
ü Real-­‐Time
Response
II
(Panel)
ü What
Have
We
Learned?
ü The
1
Thing
(Panel)
Our
Time
Together

3. Cyber
Security
Breach
Hack
DDoS
Malware
Phishing
Malware
Spyware
Ransom-­‐ware
Viruses
Worms
Botnets
InformaDon
Security

4. Source:
Center
for
Digital
Government,
Digital
States,
Coun0es,
Ci0es,
2014.
Public
IT
PrioriDes
1.
Cybersecurity
2.
Shared
Services
3.
Cloud
4.
Mobility
5.
Staffing
1.
Cybersecurity
2.
Staffing
3. Shared
Services
4.
Mobility
5.
Cost
Control
1.
Open
Gov/Data
2.
Mobility
3. Cybersecurity
4.
Staffing/Portal
5.
DR/
COOP
STATE
CIOs
COUNTY
CIOs
CITY
CIOs

5. Elected
+
Appointed
Officials
What
Respondents
want
in
a
Network
0%
20%
40%
60%
80%
100%
Redundancy
Ease
of
Maintenance
Availability
Security
Network
Source:
Center
for
Digital
Government,
2015.

6. How
Did
We
Get
Here?

7. Sources:
ABC
|
KRON
TV
|
WCPO
TV
|
WWLP
TV
|
WOCH
TV
|WTNH
TV
|
KOIN
TV
|
WSJ
|
AP
|
Sony
|
WH.gov
Ripped
from
the
Headlines

8. The
Rise
of
Hacking
Crews
Vikingdom2015:
From
Russia
with
Malice

9. Dr.
Strangelove
or:
How
I
Learned
to
Stop
Worrying
and
Love
the
Bomb
Source:
Universal
Studios
(1964)
Déjà
vu
All
Over
Again
Here
we
are
again,
50
years
later

10. How
I
Learned
to
Stop
Worrying
and
Love
Cybersecurity
Our
Panel

11. Career
Defining
Breaches

12. Managing
the
News
Cycle

13. Managing
the
News
Cycle

14. Michael
Brown
August
9,
2014

15. Dateline:
Ferguson
Flickr:
Chuck
Jines

17. August
9,
2014
–
January
7,
2015
Sources:
Operafon
Ferguson/
Al
Jazeera
America
Global-­‐Local
HackDvism

18. Meanwhile
in
the
Capitol…
Google
Maps

19. Dateline:
Jefferson
City
Flickr:
Steve
Warren
DAYS
THAT
MISSOURI
WAS
A
WORLDWIDE
Hackfvist
Target:
123

20. Target:
Governor
Nixon
Flickr:
Steve
Warren

21. Target:
Governor
Nixon
colorofchange.org

22. The
Grand
Jury
Decision
Scoh
Olson/
Gehy
Images
November
24,
2014

23. Launch
and
Learn
Flickr:
Steve
Warren
The
one
unfinished
part
of
the
state’s
cybersecurity
program
and
plan
when
crisis
hit:
DDoS

24. Key
Learnings:
Jefferson
City
Flickr:
Steve
Warren
1 Understand
HackDvism
MoDves
and
Methods
2 Understand
DDoS
Aaacks
3 Assess
Your
Network
and
Infrastructure
4 PrioriDze
Assets
5 Establish
and
Exercise
a
War
Room
6 Integrate
Network
OperaDons
Center
(NOC)
7 Integrate
Security
OperaDons
Center
(SOC)
8 Develop
a
Plan
9 Monitor
Social
Media
10 Remain
Nimble
and
Adaptable

25. From
the
War
Room
There
is
Something
for
Everyone
to
Do

26. ü Cybersecurity
=
risk
management.
ü Security
incidents
are
inevitable.
ü Prepare.
ü Fund
and
support.
ü Plan
PR
mifgafon.
Elected
and
Appointed
Officials
What
Have
We
Learned?
The
LiAle
Red
Breach
Book

27. What
Have
We
Learned?
The
LiAle
Red
Breach
Book
Chief
InformaDon/
Technology
Officers
ü Own
the
plan.
ü No
surprises.
ü Champion
a
strong
cybersecurity
culture.

28. ü Idenffy
and
apply
best
pracfces.
ü Evaluate
and
recommend
strategies,
programs
and
tools.
ü Monitor
and
manage
crifcal
systems
and
infrastructure.
Chief
InformaDon
Security
Officers
What
Have
We
Learned?
The
LiAle
Red
Breach
Book

29. ü Know
security
implicafons
of
delivery
systems.
ü Encourage
employees
to
take
security
seriously.
ü Apply
agency
resources
to
support
cyber
security
as
appropriate.
Agency
or
Line
of
Business
Managers
What
Have
We
Learned?
The
LiAle
Red
Breach
Book

30. ü Understand
good
cyber
security
is
good
for
everybody.
ü Train.
ü See
something,
say
something.
ü If
you
don’t
know
what
it
is,
don’t
click
on
it.
Front
Line
Employees
What
Have
We
Learned?
The
LiAle
Red
Breach
Book

31. ü Adopt
security
best
pracfces.
ü Adhere
to
government
security
requirements.
ü Share
informafon
regarding
suspicious
acfvity,
incidents
or
potenfal
breaches.
Service
Delivery
Partners
Private
Non
Profit
What
Have
We
Learned?
The
LiAle
Red
Breach
Book

32. Encouraged
through
awareness
campaigns
to:
ü Do
the
basics
well.
ü Stay
alert
for
common
tricks.
ü Help
authorifes
fight
cybercrime.
General
Public
-­‐
NeDzens
What
Have
We
Learned?
The
LiAle
Red
Breach
Book

33. Thing
1
The
Exit
QuesDon

34. govtech.com/security