State Cybersecurity Governance Case Studies: Cross Site Report   [open pdf - 6MB]

"This report was developed as part of a case study pilot project to identify how states have used laws, policies, structures, and processes to help better govern cybersecurity as an enterprisewide, strategic issue across state government and other public and private sector stakeholders. This project emerged as a result of the 'Department of Homeland Security (DHS) Advisory Council Final Report of the Cybersecurity Subcommittee, Part II - State, Local, Tribal & Territorial (SLTT)', which recognized the importance of governance in addressing a range of cybersecurity technology and operational challenges. The case studies explore cross-enterprise governance mechanisms used by states across a range of common cybersecurity areas--strategy and planning, budget and acquisition, risk identification and mitigation, incident response, information sharing, and workforce and education. The cross site report and individual case studies are not formal evaluations. Instead, they offer trends, concepts, and approaches that may be useful to other states and organizations that face similar challenges. As this report covers a broad range of areas, each related section provides an overview of states' governance approaches, rather than detailed explorations."

Public Domain
Retrieved From:
Department of Homeland Security: http://www.dhs.gov/
Media Type:
Help with citations