EPA’s Story: Developing a Secure Mobile-First Culture Malcolm Jackson Assistant Administrator for Environmental Information and Chief Information Officer June 25, 2012
Agenda Industry past, present, and future History of secure mobile devices at EPA Security concerns Cybersecurity evolution at EPA Recent Cybersecurity Threats Current and near-future EPA initiatives Future Challenges The future and the convergence of technology 6/25/2012U.S. Environmental Protection Agency2
6/25/20123U.S. Environmental Protection Agency Photo source: Micro Manufacturing Where the Industry has Been….
History of Secure Devices at EPA Blackberry Laptops 6/25/2012U.S. Environmental Protection Agency4 Risk: Low/Moderate
EPA Cybersecurity Evolution 1999: Agency-wide manual published 2000: GAO Report identifying EPA weaknesses 2001 – 2002: Creation of Technology and Information Security Staff and Senior Agency Information Security Officer position – present: Compliance with FISMA requirements; continuous monitoring of security threats to Agency 6/25/2012U.S. Environmental Protection Agency5
Recent Cybersecurity Threats 6/25/20126U.S. Environmental Protection Agency Photo Source: Voltage Security
Current EPA Initiatives Tablets Telework Collaboration Tools Wireless Networks New Hardware BYOD 6/25/2012U.S. Environmental Protection Agency7 Risk: Extremely High
Future Secure Device Challenges Paradigm shift Managing security tool(s) evolution Agency Leadership engagement and ownership Move from reactive to proactive Educating employees Ownership by everyone 6/25/2012U.S. Environmental Protection Agency8
6/25/20129U.S. Environmental Protection Agency Technology Convergence Over the Past 5 Years 011/03/technological- convergence.html Photo Source:
Technology Convergence in the Next 5 Years 6/25/201210U.S. Environmental Protection Agency Photo Source:
Questions? 6/25/201211U.S. Environmental Protection Agency