By Eric Geller 03/29/2017 12:43 PM EDT the Department of Homeland Security Is Beginning to Set up a Coordinating Body for Electi
Total Page:16
File Type:pdf, Size:1020Kb
(b) (5), (b) (6) From: POLITICO Pro Cybersecurity Whiteboard [mailto:[email protected]] Sent: Wednesday, March 29, 2017 12:54 PM To: (b) (6) Subject: DHS creating election security coordinating group By Eric Geller 03/29/2017 12:43 PM EDT The Department of Homeland Security is beginning to set up a coordinating body for election epic.org EPIC-17-03-31-DHS-FOIA-20180515-Production-1 000001 cybersecurity consultations with state officials, a DHS official said today. “We are doing that work now,” Neil Jenkins, the director of DHS’s enterprise performance management office, said at a meeting of the technical standards agency NIST’s cyber advisory group. “That work is in the planning phases, and we’re beginning outreach to” election administrators and voting system vendors. At the end of the Obama administration, following Russia’s alleged cyberattack campaign and intrusions at two state election offices, DHS designated election systems as "critical infrastructure," on par with hospitals and the power grid. In making its designation, DHS created a new election subsector under the existing government facilities sector, one of the 16 critical infrastructure sectors. Sectors and subsectors are managed through coordinating councils, which include representatives from affected critical infrastructure operators, technical experts and consulting federal agencies. DHS and state officials will meet several times in the next few weeks to begin planning an election security coordinating council, Jenkins said at the NIST meeting. “We’re starting to engage with them more robustly.” The department will spend the next few months showing state election officials how coordinating councils work in the private sector, Jenkins said. “Our goal is to have a robust sector built up for them … at the end of this year or beginning of next year,” he added, “so that we can be doing this in the lead-up to the November 2018 elections.” To view online: https://www.politicopro.com/cybersecurity/whiteboard/2017/03/dhs-creating-election- security-coordinating-group-085616 Was this Pro content helpful? Tell us what you think in one click. Yes, very Somewhat Neutral Not really Not at all You received this POLITICO Pro content because your customized settings include: tags: Cybersecurity: Executive Branch, Cybersecurity: Vulnerabilities, Cybersecurity: Breaches, Cybersecurity: States/Governors, Cybersecurity: Critical Infrastructure, Cybersecurity: Department Of Homeland Security. To change your alert settings, please go to https://www.politicopro.com/settings This email was sent by: POLITICO, LLC 1000 Wilson Blvd. Arlington, VA, 22209, USA epic.org EPIC-17-03-31-DHS-FOIA-20180515-Production-1 000002 Cyber Vigilance: The Virginia Way CYBER VIRGINIA• National Cyber "Firsts" are 5econd Nature in Virginia "Few issues nre 11Iore National Institute of Standards and Technology (NIST) Cyber Framework: First in the nation to adopt federal standards fifllrinlllclitni to the sccll rih) al/(I prosperity of the COlJllllO l/ wenlth Information Sharing and Assessment Organization (ISAO): First state to alld its citizens thalJ the safe, declare itself an ISAO reliable, rlllri secu re operation oj Securing Consumer Transactions: First state to require security on debit or DI/ r comp uter Iletworks al/n the credit card present transactions, via Executive Directive #5 systellls they ell able. " Digital Identity: First state to enact landmark legislation, now used as the model by other states COMMONWEALTH OF VIRGINIA CYBER SECURITY COMMISSION Virginia Apprenticeship Program: for the first time in Virginia history, First Report, Aug. 2015 businesses have the opportunity to s tand up registered apprenticeships for cyber security occupations Cyber Policy Leadership Executive Order #8 Launches Cyber Virginia and the Cyber Security Commission Open Cyber Executive Directive #6 Improved cyber protocols, expanded Jobs in Virginia cyber related risk management activities and conducted inventory of th e Commonwea lth's cr iticaJ and sensitive sy stems 17,000 HB1946/5B919 Sealing of administrative subpoenas for electroni c communications and social networking data Average Cyber Starting Salary in Virginia 5B1307 Clarifies language for search warrants for seizure, examination of computers, networks, an d oth er electronic devices $88,000 5B1109 Secures FOIA exemptions for meetings and discussions which include sensitive informati on regarding cy bersec urity vulnerabilities Average salary in Virginia with a Certified 581129 Secures FOIA exemptions for plans, information, or responses to Information Systems terrorism regarding cy bersec urity threats and vulnerabilities Security Professional (CISSP) designation 5B1121 Defines IT responsibilities of agency directors $93,010 HB1562/5B814 Electronic identity management standards; liability HB924 All ows providers to verify the authenticity of reports or records with an affidavit from the custodian of the records CYBERJOBS: VIRGINIA CYBER FIRMS ARE HIRING! epic.orgVirginia is second onlyEPIC-17-03-31-DHS-FOIA-20180515-Production-1 to California in its cyber wo~kforce size000003 Cyber Attacks Thwarted In the Commonwealth The Cyber Security Commission recognizes two national trends th at will create additional needs in cy bersecurity focused on cyber-physical systems: 1. Rapidly growing initiatives in advanced automation of physical systems (e.g., UAS' automated control of automobiles , digital factories , 3D printers, "Internet of Things") 2. Cyber attacks have been growing in frequency and sophistica ti o n, which can cause physica l and economic harm to ex isting kinetic systems. In order to adequately address the security concerns for these systems, security must be built in from the beginning through inherently secure desig n. This creates an opportunity for Virginia businesses and univers ities to invest in research in these areas of growth in our economy. Cyber Defense, Centers of CYBER INNOVATION Academic Excellence Virginia Writes the Book Daily George Mason University MACH37: Innovative accelerator for emerging secu rity firms. To date Mach37 Hampto n Univers ity* has launched 35 cyber security companies in Virginia; www.mach37.com James Madison University Longwood University Virginia Cyber Security Partnership: Es tablished by Governor McAu liffe; researches technologies to safeguard citizens and agencies from cyber attacks Ma rymount Univers ity against smart vehicles Norfo lk State University Virginia Polytechnic Institute* Cyber Portal: Public website pro vides reputable info rmation on cyber stan Radford University dards and best practices for ci tizens, bus inesses, and government organiza Northern Virginia Community College tions; www.cyberva.virginia.gov Lord Faifax Community Coll ege Tidewater Community Coll ege CYBER EDUCATION Virginia is Training its Workforce Now Through a ri gorous certificati on process, the U.s. Nati onal Security Agency New Virginia Cyber and Department of Homeland Security certify post-secondary schools that Security Agenda excel in cyber defense training as "Cyber Defense, Centers of Academic D Increase the number of Cyber Excellence." Defense, Centers of Academic Excell ence Innovati ve cyber training to speed worker readiness for th e New ViTginia Virginia Scholarshi p for Service Eco nomy: II Program • Cyber Boot Camps: Cybel' Education training for high school teachers II Veterans Pa thway Program in Cyber Security at GMU • Conference on Cyber and Education: Discussion and edu cation on the .. Virginia Cyber Range importance of training for cyber careers II Inform ati on Sharing and Analysis • Cyber Range: Secure platform built for training, research & collaboration Organiza tion mV irginia Fu sion Center FOR MORE INFORMATION epic.org visit http://cyberva.virginia.govEPIC-17-03-31-DHS-FOIA-20180515-Production-1 or call 804-786-9579 000004 Nat ional Protect ion and Programs Directorate Chief of Stall Under Secretary Deputy Un der Secretaries Man agement r------- I lnfom1 ...... T«IInoIocY I I Comm~on<! ---1 ~Ilri<fircT ..m f>.-:AIf.in; General Counsel Strategy and Po licy ~ on<! FinoncNI ---j -.Iion 1 ~- ~Alfoin; Monoilo......" on<! ---j -- 1 - ---j -Acq<Milion< Compl iance and 1 Privacy Security y~CM~'cd~p ", ,,,,~ ---j ----I I I I Offi ce of Ollice of Cybersecurity Ollice of Biomet ric Offi ce of Cyber and Federal Prot ective Infrastruct ure and Communicat ions Ident it y Management Infrast ructure Analys is Service Prot ect ion epic.org EPIC-17-03-31-DHS-FOIA-20180515-Production-1 000005 Tools and Resources to Help Businesses Plan, Prepare, and Protect from an Attack Homeland Security Starts with Hometown Security The U.S. Department of Homeland Security (DHS) closely monitors attacks on public gatherings and public places to constantly enhance the Nation’s security. During both steady state and times of heightened awareness, DHS engages closely with our private sector and community partners to provide expert counsel and recommendations about protective measures they can implement to protect facilities and venues. DHS provides free tools and resources to communities because the Department recognizes that communities are the first line of defense in keeping the public safe and secure. The Department encourages businesses to Connect, Plan, Train, and Report. Applying these four steps in advance of an incident or attack can help better prepare businesses and their employees to proactively think about the role they play in the safety and security of their businesses and communities. CONNECT: