TECHNOLOGICAL CRIME ADVISORY BOARD CATHERINE 100 North Carson Street JAMES D.EARL CORTEZ MASTO Carson City, Nevada 89701-4717 Executive Director Attorney General Telephone (775) 684-1115 Fax (775) 684-1108 Chair E-Mail: [email protected] ADVISORY BOARD Bill: SB 267 CATHERINE Position: Support CORTEZ MASTO Attorney General, Chair Tech Crime Board Statutory Missions (2 of 7) – NRS 205A VALERIE WIENER o Recommend changes to civil and criminal statutes in light of tech change. Nevada State Senator, Vice o Assist in securing government information systems. Chair TRAY ABNEY Background: Security Issues Associated with Multi-functional Devices (MFDs) Reno / Sparks Chamber of Commerce o CBS News “Copy Machines, a Security Risk?” April 19, 2010 at http://www.cbsnews.com/video/watch/?id=6412572n&tag=mncol;lst;8 DANIEL G. BOGDEN o Board meeting on July 22, 2010: Technological background and concerns United States Attorney, District of Nevada regarding State systems (minutes attached, see pages 26 to 30). DOUGLAS C. GILLESPIE Sheriff, Clark County Risk Analysis Leads in Different Directions for Public and Private Sectors Las Vegas Metropolitan o Nevada State Standard on MFDs (draft attached) is more proscriptive than Police Department SB 267 since State agencies, generally, have IT personnel who can evaluate MIKE HALEY and limit risks associated with some functions of MFDs. Sheriff, Washoe County o Private sector users of MFDs purchase them specifically to connect to a network, which is a risk State IT personnel seek to prevent or mitigate. KEVIN FAVREAU Special Agent in Charge, o Conclusion: SB 267 mitigates the most significant risk to data stored on or Federal Bureau of copied by MFDs; State agencies are required to take additional precautions Investigation (as of finalization of standard); private sector enterprises with IT personnel DALE NORTON should consider State standards in their MFD implementations. Asst. Superintendent, Character Education, Nye County School District SB 267 continues a broader Nevada effort, over several Legislative sessions, to distinguish this State as a protector of citizen data – both for its own sake HARRY MORTENSON Nevada State Assemblyman and in support of economic development. RICHARD D. SHIELDS th Special Agent in Charge, 75 Session (2009) United States Secret Service o NRS 388, cyber bullying, age appropriate student instruction in cyber safety, cyber security and cyber ethics. CHRISTOPHER G. IPSEN Chief Information Security o NRS 603A, encryption of personal information in transit and on portable Officer, permanent designee devices (laptops and cell phones). for DANIEL H. STOCKWELL NRS 179, identification, freezing, and seizure of electronic funds associated Director & CIO, o Department of Information with certain technological crimes. Technology th WILLIAM UFFELMAN 76 Session (2011) Pending Examples: SB 82, AB 83 President & CEO, Nevada Bankers Association Consequences GREGORY WHITE o Growth of Las Vegas SuperNAP (Switch Communications), now one of Resident Agent in Charge, world’s top 10 data centers with military, government, and large Internet U.S. Immigration & Customs company customers. Enforcement o Multiple bills in support of interactive computer gaming – potentially a unique Nevada funding source, totally dependant on data integrity and protection. Minutes of the Technological Crime Advisory Board July 22, 2010 The Technological Crime Advisory Board was called to order at 10:00 AM on Thursday, July 22, 2010. Attorney General Catherine Cortez Masto, Chair, presided in Room 4401 of the Grant Sawyer Building, Las Vegas, Nevada and via videoconference in Room 3137 of the Legislative Building, Carson City, Nevada. ADVISORY BOARD MEMBERS PRESENT: Nevada Attorney General Catherine Cortez Masto (Advisory Board Chair) Nevada State Senator Valerie Wiener (Advisory Board Vice-Chair) Daniel Bogdan, U.S. Attorney, Department of Justice (DOJ) Captain Tom Hawkins, Las Vegas Metropolitan Police Department (LVMPD), meeting designee for Sheriff Doug Gillespie, LVMPD Lieutenant Jerry Baldridge, Washoe County Sheriff’s Office (WCSO), meeting designee for Sheriff Mike Haley, WCSO Chris Ipsen (Rep. for Dan Stockwell, Director, NV Dept. of Information Technology) Nevada State Assemblyman Harry Mortenson Dale Norton, Nye County School District Assistant Superintendent Assistant Special Agent in Charge Rob Savage, U.S. Secret Service (USSS), meeting designee for Special Agent in Charge Richard Shields, USSS ADVISORY BOARD MEMBERS ABSENT: Tray Abney, Reno/Sparks Chamber of Commerce Special Agent in Charge Kevin Favreau, Federal Bureau of Investigation (FBI) William Uffelman, President & Chief Executive Officer, Nevada Bankers Association Resident Agent in Charge Greg White, U.S. Immigrations & Customs Enforcement (ICE) TASK FORCE MEMBERS PRESENT: None STAFF MEMBERS PRESENT: James D. Earl, Executive Director OTHERS PRESENT: James R. Elste, Symantec Bob Cooper, Bureau of Consumer Protection Dan Jacobsen, Bureau of Consumer Protection Dennis Carry, WCSO Suzie Block, Attorney General’s Office Nevada Technological Crime Advisory Board 1 July 22, 2010 Meeting Minutes G2 Kristen Hansen, Attorney General’s Office Lydia Sittman, Attorney General’s Office Ira Victor, InfraGard Kristin Erickson, Nevada District Attorney’s Association Teri Mark, Nevada State Library and Archives Agenda Item 1 – Call to Order – Verification of Quorum AG CORTEZ MASTO: The meeting is called to order on July 22, 2010 at 10:00 AM. The first item on the agenda is the call to order and verification of a quorum. Mr. Earl, please call the roll. A roll call of the Advisory Board verified the presence of a quorum. Agenda Item 2 – Discussion and approval of minutes from December Board Meeting AG CORTEZ MASTO: Before moving to the next item of business, first let me say that we are joined by U.S. Attorney Dan Bogden. Welcome back, Dan. It is great to have you. Thank you very much for joining us today. Item 2 is the discussion and approval of minutes from the March Board meeting. If there are any edits or comments, please make them now. Otherwise, I will entertain a motion. Motion to approve the minutes was made by Mr. Ipsen and seconded by Mr. Norton. The motion to approve the minutes was approved unanimously. Agenda Item 3 – Reports regarding Task Force and Board member agency activities AG CORTEZ MASTO: Agenda item 3 is our report regarding task force activities. At this point, we usually hear from various entities interested in giving us an update. Obviously, the FBI is not here. Would any other Board member like to give us an update on the activities of their office? LIEUTENANT BALDRIDGE: Madam Chair, from the Washoe County Sheriff’s Office, we have Detective Carry with us to provide an update from the task force. DETECTIVE CARRY: Thank you Attorney General. The task force in the north has been very busy since the last meeting. We have served approximately 10 to 12 federal and state search warrants relating to child pornography in addition to various fraud-related search warrants. Just the other day, we had a sentencing in federal court. The subject was involved in possession of child pornography. He received 60 months. We have had several other people who have pled out during the interim since the last meeting but have not been sentenced yet. We have had approximately 5 indictments and have recovered probably over 100,000 videos and images of child pornography and other related child exploitation crimes. AG CORTEZ MASTO: Thank you very much, Detective Carry. I also understand that Mr. Ipsen has some information regarding participation in cyber competition sponsored by the Department of Homeland Security. Nevada Technological Crime Advisory Board 2 July 22, 2010 Meeting Minutes G3 MR. IPSEN: Absolutely. Thank you very much for the opportunity. I want to take a second to complement the Nevada contingent to the annual Department of Homeland Security cyber security challenge. It was held in Washington DC last month. This is a competition where each state sends a representative group of cyber security professionals. They challenge each other. The first day is a day of training. The second day is a day of competition. Each group works against every other group in the competition. They have 10 minutes to secure their machines and then two hours to defend them against other groups. After that, they reverse rolls. In this year’s competition, a multijurisdictional group of individuals from Nevada won the competition. Last year the competition was won by a multi-state group. This year Nevada’s group of John Lusak, from the Office Information Security, Anthony Workman, from the Department of Public Safety, and Eric Hohman from Washoe County, competed and won the competition. Not only did they defeat everyone in the competition this year, but last year’s champions as well. This was really a feather in Nevada’s hat. On a personal level, I want to say it was really nice to be in a position where Nevada finished number one, rather than the number 50 we so often hear about. We really have some great assets in Nevada. I think that was born out this competition. We will have an opportunity next year to defend our title. We will also have the opportunity to extend these capabilities nationally by working with other people. This is a really important area. It is where the rubber meets the road. You can talk about people being in cyber security, but until you subject yourselves to competition with other highly capable professionals, only then do you really know what you are capable of doing. I really commend them in their efforts. We also had an opportunity to talk about some of the challenges that face the state with officials from the Departments of Homeland Security and State, and a number of other key entities headquartered in Washington DC. I think Nevada is making very positive steps forward in this arena. AG CORTEZ MASTO: Congratulations. And, congratulations to all the members of the team. Might I add, one of the team members, Mr.