State of the States: CIO Priorities, Trends and Policy Issues

1. State of the States: CIO Priorities, Trends and Policy Issues IPER Summit on Emergency Preparedness for Essential Records July 21-22, 2008 Brenda Decker CIO, State of Nebraska Director, NASCIO Executive Committee Co-Chair, NASCIO Security & Privacy Committee

2. About NASCIO • NASCIO represents state chief information officers and information technology executives from the states, territories and D.C. • NASCIO's mission is to foster government excellence through quality business practices, information management, and technology policy.

3. State IT Landscape Today • IT security and risk impact! • Critical infrastructure protection – uneven investments • Ramifications of data breach and citizen trust • Insider threats and employee training • Continued consolidation – infrastructure, services and people • State IT workforce: retirement wave, IT skills gap, challenge of recruiting • Data management: quality and sharing • Impact from federal laws, changing programs and unfunded mandates: REAL ID, Medicaid, Homeland Security

4. Multifaceted Role of the State CIO

5. Challenges of State CIOs • Bringing the focus to the “enterprise” • Collaborating across and beyond government • State IT workforce – skills and demands • Facilitating efficient, safe exchange of data • Managing risks - data breach! • Building relationships in the face of change • Managing and cultivating funding

6. Why Consolidation? The Reality of State IT

7. State CIO Priorities: 2008 • Consolidation: centralizing, consolidating services, operations, resources, infrastructure • Security: Tightening security safeguards, enterprise policies, • Disaster Recovery: Improving disaster recovery, business continuity planning and readiness • Electronic Records Management/Digital Preservation/E-discovery: strategies, policies, services • Health Information Technology: Assessment, partnering, • Shared Services: Sharing resources, services, infrastructure • Connectivity: Strengthening statewide connectivity, broadband • Governance: Improving IT governance • Interoperability: infrastructure and data • Human Capital/IT Workforce: attracting, developing and retaining IT personnel, retire wave planning NASCIO State CIO Survey Nov 2007

8. State CIO: IT and Solution Priorities • Virtualization – computing and storage • Security enhancement tools • GIS and spatial analysis • Legacy modernization and upgrades • Identity Access and Management (IAM) • Networking, voice and data communications • Document/Content management • Wireless: Mobile, remote and fixed wireless • Service Oriented Architecture (SOA) and web services NASCIO State CIO Survey Nov 2007

9. States Adopting More Business Disciplines in IT to Manage Risk • Enterprise architecture: blueprint for better government • Project and Portfolio Management: PM framework, methodology, education, tools and oversight • Service level management and ITIL • Change management

10. Cyber Security and the States • Critical infrastructure protection • Spam, hacking, spyware, malware, phishing and probes up! • More aggressive threats – organized criminal activity • Growing role of state CISO • Investments by state CIOs

11. IT security incidents: 61% caused by insiders Employee awareness and education is critical Asset management and data protection The Insider Threat is REAL!

12. Disaster Recovery & Business Continuity • Government at Risk: critical infrastructure protection • Aging state data centers • Critical business recovery • No state ready for pandemic • IT resiliency and the continuity of government • CIO challenge: making the business case for the investment

13. Over 27% of state IT workforce will be eligible to retire in 5 years Who will actually retire and when? How best to address the skills gap? Best practices for recruiting and retaining IT workforce Facing the IT Workforce Challenge

14. The States and Health IT Significant role of state in healthcare as … • Payer – Medicaid, SCHIPs, other programs • Provider – increased emphasis on quality of service • Purchaser – over 5 million employees nationwide Top public policy issue for the Governors

15. eHealth: Complex State Issues • Appropriate federal role • Interoperability – information exchange • Data standards and formats • Security and privacy • Medicaid coverage, waivers, innovations • Legal, regulatory and administrative barriers • Lack of funding and incentives to accelerate deployment • Information dissemination and education

16. State Issues to Monitor in 2008 • Response to growing fiscal stress: budget cuts, bunker mentality OR opportunities for state CIOs to advance the enterprise view? • Legacy system renovation/replacement - aging • Response to energy costs - green IT, climate change, energy efficiency, e-waste • E-records, digital preservation & e-discovery – new risks and management concerns • Innovative funding, financing & options for IT • Statewide broadband initiatives

17. Federal Issues and State CIOs • Streamlined federal cost allocation and A-87 • REAL ID implementation: real cost? • Homeland Security funding: cyber? • MITA – new architecture for Medicaid • Telecommunications reform? • Interoperability/public safety wireless • Expanding federal pre-emption? privacy, data breach notification, electronic crime

18. The State CIOs: A View Forward • Stiff competition for state funding • Driving new business models & consolidation: service levels • IT security and data protection • Millennials in the workforce • Shifting federalism? States and the new administration