Commonwealth Office of Technology Update: Mission and Progress Report

Commonwealth Office of Technology Update Ruth Day, CIO and David Carter, CISO Interim Joint Committee on Tourism, Small Business and Information Technology October 29, 2020 1pm

Introduction Hometown Madisonville Best Town on Earth Farm Life Education University of Kentucky Licensed CPA in Kentucky for 30 years; 2 years KPMG, Louisville Private Sector Experience IT Experience Personal Interests - Kentucky

"I Never Met A Kentuckian Who Wasn't Either Thinking About Going Home Or Actually Going Home Albert Benjamin "Happy" Chandler, Sr.

Commonwealth Office of Technology COT Origins of COT - Executive Order 2012-880 WHEREAS, the adoption of a centralized model will improve security, promote information sharing and assist agencies in focusing on their mission rather than operational issues; and WHEREAS, streamlining IT service delivery is estimated to yield significant savings upon full implementation:

COT MISSION STATEMENT To support agency partners in the fulfillment of their core mission by providing technology leadership, services, and solutions in a secure, transparent, and fiscally responsible manner.

COT Organization Office of Client Support Services Office of Infrastructure Office of Architecture and Governance Office of Chief Information Security Officer

COT Organization Chief Information Officer Deputy Chief Information Officer 17 years Chief Compliance Officer Privacy & Audit Support Contracting Officer all IT purchasing Financial Assistant Budgeting, Rated Services & Financial Reports

COT Update December 10, 2019 New Administration March, 2020 Transition to Remote Workforce April, 2020 Teams and other video conferencing May, 2020 New normal, new tools, new support June, 2020 - Getting to Enacted Budget July, 2020 Reorganization, working through cuts August, 2020 Beyond tactical to strategic September, 2020 Data October, 2020 Security Awareness Month

COT Capital Projects Project Management November, 2019 Monthly Review Quarterly Reporting Total Spend $818 million Across 9 Cabinets

COT Initiatives Modernize ticket system Expand use of Microsoft Office tools Expand digitalization Automate internal processes Create legacy system inventory

COT Accomplishments and Goals Pandemic response Infrastructure savings Collaboration Collaboration Security Security

Commonwealth Office of Technology Security is not the #1 thing, it s the # 1 thing we manage, in everything we do.

Commonwealth Defenses At Work On an average day, proactive network defenses block over 21,000 malicious attacks on the state network. On an average month, the Commonwealth receives 20.4 million emails. Of these only 5.5 million are delivered with 73% of email blocked for malicious or unwanted content. The top threats are attempted credential theft and malicious activity such as ransomware. By using a layered defense, the Commonwealth blocks around 1,000 malicious events at the employee workstation every month that make it through the formidable network defenses. Looking holistically across all of the state network, the Commonwealth Security and Incident Event Monitoring Systems has logged over 467,000 events in the past 30 days. Using advanced analytics, this system allows the effective prioritization and management of these threats. The Commonwealth has been the target of attacks intended to degrade the services to the citizens by overwhelming the state Internet connection on 5 occasions in the past year. Proactive defenses successfully mitigated these attacks without any degradation of service.

Commonwealth Office of Technology Questions? Presenters: Ruth Day, CIO, ruth.day@ky.gov David Carter, CISO davidj.carter@ky.gov