1. Cyber Security in New Jersey State Government
Alfonsina Comune, COS/CISO, OIT

2. Agenda Cyber Security Business Problems OIT Solutions Planning
Technology

3. Business Problems
With >1000 daily suspicious events being detected, ongoing concern over hacking & other cyber crimes
More frequent and potentially damaging virus attacks
For enterprise (Statewide) , >15,000/day, 99%+ cleaned automatically
For OIT desktop Web, >50/month, 99% cleaned automatically
Currently over 60% of to OIT is Spam
Spyware is another significant, though unquantified threat

4. OIT Solutions – Planning
Vulnerabilities
Acceptable Risk
Information
Add Controls
Operate, Maintain, Monitor, and Train
Risk Assessment
Threats
Technical Controls
Non-Technical Controls
Unacceptable Risk
Information Security Program
Commitment
Oversight
Documented Policies
Lifecycle security view
Risk Management
Establish Requirements
Build to Design
Design to Requirements
Test to Requirements
Operate & Maintain

5. OIT Solutions – Technology
Vulnerability Assessment and Management
Intrusion Detection and Prevention
Virus Scanning
Spam Filtering
Web Filtering
Agency Isolation
Identity Management

6. OIT Solutions – Technology
Virus Scanning
Enterprise (State gateway)
Inter-departmental
OIT internal
Spam Filtering
Enterprise
Website Filtering
Public Tier
Internet User
Browser Based
Secure Tier
Core Tier

7. OIT Solutions – Technology
Partnerships
Intra-state with Department of Law and Public Safety
Inter-state with nine states, three cities, the U.S. Army, and Monmouth University

8. Summary
Through a combination of planning and technology, OIT and the State of New Jersey are addressing cyber security threats today, and with the help of partners in government, industry, and academia, will improve our effectiveness in the future.