Cyber Security in New Jersey State Government

1
Cyber Security in New Jersey State Government

• Alfonsina Comune, COS/CISO, OIT

2
Agenda

• Cyber Security Business Problems
• OIT Solutions
• Planning
• Technology

3
Business Problems

• With gt1000 daily suspicious events being
  detected, ongoing concern over hacking other
  cyber crimes
• More frequent and potentially damaging virus
  attacks
• For enterprise (Statewide) e-mail, gt15,000/day,
  99 cleaned automatically
• For OIT desktop Web, gt50/month, 99 cleaned
  automatically
• Currently over 60 of e-mail to OIT is Spam
• Spyware is another significant, though
  unquantified threat

4
OIT Solutions Planning

• Information Security Program
• Commitment
• Oversight
• Documented Policies
• Lifecycle security view
• Risk Management

5
OIT Solutions Technology

• Vulnerability Assessment and Management
• Intrusion Detection and Prevention
• Virus Scanning
• Spam Filtering
• Web Filtering
• Agency Isolation
• Identity Management

6
OIT Solutions Technology

• Virus Scanning
• Enterprise (State e-mail gateway)
• Inter-departmental
• OIT internal
• Spam Filtering
• Enterprise
• Website Filtering
• OIT internal

7
OIT Solutions Technology

• Partnerships
• Intra-state with Department of Law and Public
  Safety
• Inter-state with nine states, three cities, the
  U.S. Army, and Monmouth University

8
Summary

• Through a combination of planning and technology,
  OIT and the State of New Jersey are addressing
  cyber security threats today, and with the help
  of partners in government, industry, and
  academia, will improve our effectiveness in the
  future.