Local Government Cyber Security Resources
Improving Cyber Security in Your County and Municipality
For Elected Officials, Administrative Officials and Business Managers:
(Click the images below to access the pdf file)
After you have reviewed the guides, we ask for input-particularly from local governments-regarding these documents. This brief, five-minute survey will enable us to gain valuable feedback in order to enhance our education and awareness materials. Take Survey
The Local Government Cyber Security: Getting Started Guide is a brief, practical reference intended for smaller entities that may not have the technology or information security expertise of other entities and therefore need a basic "how to get started" resource. The Guide provides a general overview of issues, and is particularly helpful for increasing the information security awareness level of those local government staff in non-technical positions (such as elected officials and administrators). The Guide is supplemented by a series of appendices which cover specific topics in more depth.
For Your Technical Staff:
NYS CSCIC Cyber Security Advisories
U.S. National Institute of Standards and Technology (NIST) Computer Security Special Publications ( http://csrc.nist.gov/publications/PubsSPs.html
)
For Your Employees:
Newletters
Download a monthly newsletter, add your logo and pass these easy-to-understand tips to your employees. Learn about:
- Cybercrime
- Security of Mobile Communication Devices
- Social Networking Sites: How To Stay Safe
- Security of Credit Card Transactions
Special Events:
Bi-monthly National Webcast Initiative: Watch or listen to a cyber security expert talk about issues important to you. Miss a session? Catch it again on an archived session. Topics include:
- June 16 - 17, 2009 Albany NY
- Past Presentations
- Recorded sessions for local government officials:
- Information Security in Local Governments "IT System Control"
Presented by Steve Cornell & Nadine Kilcullen, NYS Office of the State Comptroller (74 minutes, 20 seconds)
- Keeping Your Local Government Running: Part I
Experience with Helping Local Governments Develop Cyber Security and Continuity Plans and Procedures
Presented by: Stan France & Mary Ball, Schoharie County (58 minutes, 25 seconds)
- Keeping Your Local Government Running: Part II
Developing Your Own Local Government Cyber Security Plans
Presented by: Stan France & Mary Ball, Schoharie County (62 minutes, 43 seconds)
- Now That We Know What We're Supposed to Do, How Are We Going to Do It?
Presented by: Local Government Officials & State Agency Personnel (75 minutes, 55 seconds)
- Information Security in Local Governments "IT System Control"
- Cyber Security User Awareness Videos
- Cyber Security Training Videos for Business Managers
- Information Classification Training : The New York State Information Classification and Control Policy and Standard , released by CSCIC in October 2008, is a process for all State agencies to classify their information and apply appropriate controls. This document and training provides best practices for local governments as well. The training session is available for viewing at:
- Cyber Security Videos for Home Users
Cyber Security Awareness Training Computer-based training - NYS local governments only contact CSCIC for more information. info@cscic.state.ny.us
Check back here regularly for updated listings of available trainings.
- Cyberterrorism Defense Initiative (Formerly Sentinel) Free Cyber Security Training
- Digital Towpath Training Video for Local Governments
- CERIAS Training and Awareness
- CSI Training Events
- SANS Training Events
- SANS Webcast
- U.S. Cyber Challenge
- Information Classification Video
- ACT Online Cyber Security Training
Please Note: The NYS Office of Cyber Security & Critical Infrastructure Coordination (CSCIC) is not responsible for the quality, merchantability and fitness for a particular purpose of products or services available on external sites and listed or described on our menu; nor is the NYS CSCIC - Cyber Security Events/Training site responsible for the accuracy, reliability or currency of the information contained on the website and supplied by external sources.
Get Involved! Special Projects
NYS Local Government Network and Application Vulnerability Scanning Project: FAQ
NYS Office of Homeland Security Grants FY 2009 HSGP/SHSP Program for County and Municipal Governments:
- Cyber Security Planning:
Development of organizational cyber security plans, policies and procedures, including those for awareness and training - Network, System, and Application Vulnerability Mitigation:
Grant funds can be used to remediate vulnerabilities in their information technology (IT) networks and systems identified during scans performed by NYS CSCIC through its ongoing Local Government Vulnerability Scanning program and/or to fund additional network, application, etc., vulnerability scanning services. - Network Intrusion Detection/Prevention System (IDS/IPS) Monitoring:
Purchase of network IDS/IPS and/or firewall devices and/or development of a contract with the NYS CSCIC to receive 24x7x365 device monitoring and/or management services.
Please send an email to info@cscic.state.ny.us for more information.
SCADA Systems Procurement Project SCADA (Supervisory Control And Data Acquisition) generally refers to the systems which control our critical infrastructures -- such as electric power generators, traffic signals, dams, and other systems. Protecting our critical infrastructure and process control systems is a vital component of our nation's readiness and response efforts.
Multi-Government Encryption Procurement Initiative
Encryption--a technique that is used to protect the privacy and security of information--is one layer in a multi-tiered cyber security defense. As organizations strive to meet the challenges posed by data loss and theft, use of encryption is increasing.
By leveraging the buying power of the Federal government, state and local governments will benefit from favorable pricing, terms and conditions in their efforts to secure information and to comply with regulations. This is the first time such contracts are being made available to state and local governments and the ability to purchase off these contracts is expected to save millions of dollars nationally.
Education and Awareness Materials
Cyber Security Awareness Toolkit: An Awareness Toolkit was created for State and local governments. The toolkit is designed to promote the delivery of a consistent cyber security awareness message by reinforcing core themes in practical, informative, entertaining, and usable ways. Everyone is encouraged to take advantage of the following resources and use the information to promote cyber security awareness. It includes items such as:
- posters
- calendars
- bookmarks
2009 Cyber Security Awareness Toolkit