Nine Tough Questions Mayors Should Ask Their Geeks

1. Nine Tough Questions Mayors Should Ask Their Geeks For Mayors’ Technology Summit Fox School of Business, Temple University 8 October 2004 Bill Schrier, Chief Technology Officer City of Seattle, Washington bill.schrier@seattle.gov Nine Tough Questions Bill Schrier, CTO, City of Seattle

2. The CIO Chief Geek, aka CIO Chief Information Officer – The person, reporting to the CEO, who determines the overall strategicdirection and insures business contribution of the information systems function in a business. Geek, noun, slang a person who is extremely interested and knowledgeable about computers, electronics, technology, and gadgets; also called gearhead, propellerhead Propeller-less Nine Tough Questions Bill Schrier, CTO, City of Seattle

3. Wi Fi Viruses Internet VoIP Phishing XML Nine Tough Questions Bill Schrier, CTO, City of Seattle

4. Tough Questions • Information technology must serve constituents • Information technology and networks: • an enabler of government • also a dependency, vulnerability • new threats: cyber-attacks, info theft, reputation loss • How do you know your IT is effective and secure? • Hard questions to help you - the City’s CEO – insure IT serves you and your constituents Nine Tough Questions Bill Schrier, CTO, City of Seattle

5. 1. Priorities Tough question number 1: Do your geeks (technology staff) know your priorities? • Increasingly, technology enables every department to deliver faster, better, cheaper • IT works across the government – interdepartmental cooperation, interoperability • Technology makes your priorities “real”: 24x7 services, web, 311, community notification • But there is so much to do! And it is costly! How do you decide where to invest $$$ ? Nine Tough Questions Bill Schrier, CTO, City of Seattle

6. Mayor Nickels’ Priorities • Get Seattle moving • Keep our neighborhoods safe • Jobs, opportunity for All Greg Nickels Mayor of Seattle • Build strong families and healthy communities • Make a difference in the lives of people! Nine Tough Questions Bill Schrier, CTO, City of Seattle

7. 2. City Employees Toughie #2: Are your City’s employees ready and able to secure your information? • Effective government depends upon information & communications • Employees – your greatest asset and vulnerability • Hiring – background checks • Internet, e-mail usage policies • Remote access, security policies, two-factor authentication • Security awareness – “post-it” note terror • Computer forensics – “personal” computers Nine Tough Questions Bill Schrier, CTO, City of Seattle

8. 3. CISO Toughie #3: Do you have Chief Information Security Officer? • THE single “go to” official, responsible for information security policy, awareness, resources and programs • Advises departments on risk, issues, compliance and the law: HIPPA • A check on too-rapid deployment of technology – the “idea virus” • Need help? Call my CISO! Kirk Bailey, CISO Seattle Nine Tough Questions Bill Schrier, CTO, City of Seattle

9. 4. IT and EOC Toughie #4: Are your IT staff an integral part of your Emergency Operations Center? • Communications are critical in both daily emergencies and disasters • Radio, telephone, computer networks, e-mail, web, GIS (maps), applications • Multiple redundant communications • Second responders • WTO, Nisqually Earthquake Public Safety Radio Tower Nine Tough Questions Bill Schrier, CTO, City of Seattle

10. IT Incident Command Toughie #5: Do your geeks know and practice incident command? • Worms and viruses and hackers, oh my! • Sasser, Randex F, MyDoom • Cyber attacks on utilities, communications • Alki Vulnerability Exercise • TOPOFF2 Cyber-Exercise 2003 Nine Tough Questions Bill Schrier, CTO, City of Seattle

11. Cyber Wormslayer Nine Tough Questions Bill Schrier, CTO, City of Seattle

12. Real Life TOPOFF2 Cyber @ Washington State EOC 6-7 May 2003 Nine Tough Questions Bill Schrier, CTO, City of Seattle

13. 6. Message Toughie #6: Is IT ready to broadcast your message? • Website • Electronic mail lists, listserv’s • Your TV Channel, emergency messages • Video streaming, library • Broadcasting from your EOC • Backup website, electronic mail Nine Tough Questions Bill Schrier, CTO, City of Seattle

14. What Scares Schrier Nine Tough Questions Bill Schrier, CTO, City of Seattle

15. 7. Disaster Recovery Toughie #7: Do you have an IT disaster recovery plan? • Constituents understand an earthquake • But not water leaks or building fires • Data secured off-site • Backup sites and plans • Not just computers: phones, web, e-mail • All departments – business continuity Nine Tough Questions Bill Schrier, CTO, City of Seattle

16. 8. Securing Data Toughie #8: It is 11PM. Do you know where your constituents’ data are? • Rigorous policy for new public web applications: hardening, outside review • Safeguarding names, social security numbers and identity theft • Privacy policy for your website • A certain county … Nine Tough Questions Bill Schrier, CTO, City of Seattle

17. 9. Protect Your Brand Toughie #9: Can your CIO protect your City’s branding and good name? • Impersonating, identity theft of your City’s good name • Integrity and trust • Phishing – policy “we don’t” • Protecting the “.gov” domain • Spoofing and e-mail … Nine Tough Questions Bill Schrier, CTO, City of Seattle

18. The Bottom Line City government is about making a difference in the lives of people. • Information technology: • enables better constituent service • allows citizens more access to and better interaction with their government • but is a two edged sword • Hard questions, sound policies, make for effective, secure information technology Nine Tough Questions Bill Schrier, CTO, City of Seattle