1. DIR Basics Series March 22 nd, 2016 Cybersecurity Edward Block

2. OCISO Program Overview

3. Program History 2004 DIR Forms Office of the CISO 2005 HB3112 directed DIR to create the Network Security Operations Center (NSOC), to provide network security services to state entities 2011 SB988 established the Texas Cybersecurity, Education, and Economic Development Council 2002 Penetration Testing Services as part of the Enterprise Operations Division 2013 SB 1102 created the position of state Cybersecurity Coordinator within DIR 2015 HB 1, Article IX, Sec. 9.10 Cybersecurity and Legacy System Priorities SB 34 Biennial Report to leadership on the state’s information security status

4. Electronic Governance, Risk, and Compliance (eGRC) IdentifyProtectDetectRespondRecover

5. Electronic Governance, Risk, and Compliance (eGRC) IdentifyProtectDetectRespondRecover Higher Education Program Catalog (Live) OCISO Program Participation (Live) Legacy and Cybersecurity Prioritization (Live) Agency security plans (Live) Application Portfolio Management (Future) Risk assessment (Live) Policy (Live) SOC alerting (Live) Threat (future) Urgent incidents (Live) Monthly incident reports (Live) Business continuity / disaster recovery (future)

6. Education and Awareness InfoSec Academy Monthly Webinars Service Webinars Newsletters Information Security Forum For our metrics purposes, 100% is the 143 agencies that are required to report security incidents to DIR

7. Security Services Assessment Services o Technical Assessments o Vulnerability Scanning o Web Application Vulnerability Scanning o Security Program Assessments o Decision Support Services Collaboration Opportunities o Statewide Information Security Advisory Committee (SISAC) o Information Security Working Group (ISWG) o Texas Cybersecurity Council

8. Customers State agencies and Public Institutions of Higher Education TEXAN Customers DCS Customers

9. Budgetary Details Funding provided through administrative fees collected on other DIR services Services provided free to state entities

10. On the Horizon HB 1, Article IX, Sec. 9.10: Cybersecurity and Legacy System Priorities HB 1, Article IX, Sec. 9.11: Cybersecurity Purchases SB 34: Biennial Report to leadership on the state’s information security status SB1877: Data Use Agreements within state agencies SB1878: Study on Identity and Access Management solutions for statewide adoption

11. OCISO Contact Information  24x7 Incident Response Hotline 512.350.3282  GRC Questions GRC@dir.texas.gov  Information Security Forum Questions ISF@dir.texas.gov  Other OCISO questions DIRSECURITY@dir.texas.gov