HSGP Funding for HSGP Funding for Security EffortsSecurity Efforts

Presented by

Michele Robinson

January 2008 Office of Information Security 2

What is the HSGP?

• U.S. Department of Homeland Security Grant Program

• Federal funding to help States achieve a variety of prevention and preparedness goals.

• Supports prevention, mitigation, preparedness, response and recovery activities.

January 2008 Office of Information Security 3

The Cyber Security Piece

• Many CI/KR sectors are now highly dependent on technology and the Internet

• Communications and Information Technology• Banking and Finance• Energy and Water

• So…just as many are now highly dependent upon robust cyber security as well as physical security

January 2008 Office of Information Security 4

Consider Your State Security Requirement Needs

• Disaster management– Planning, training and testing/exercise efforts

• Information sharing & analysis– Communication and collaboration tools

• Cyber security– IDS/IPS, log correlation and forensics tools

• Physical Security– Cameras, alarms, access controls

• All– Computer Hardware/Software– Planning, training, testing plans

January 2008 Office of Information Security 5

Navigating the Application Process

• Not always clear

• Moving target

• Attend the grant application workshop when offered

• Will take some effort

• More so, if you are small agency and do not have a grants management unit with experienced grant writers and support

January 2008 Office of Information Security 6

Navigating the Application Process

• Read through all of the DHS/OHS Strategy and Grant Guidance documents

• Read through additional resource material

• Determine your eligibility and Agency requirements

• Obtain Executive Management support

January 2008 Office of Information Security 7

Navigating the Application Process

• Follow the application instructions exactly

• Obtain clarification from the OHS State representative as needed

• Talk with others who have been successful

• Take your best shot

• If you don’t succeed…try again!

January 2008 Office of Information Security 8

Tentative TimelineJan – Program Guidance and Application Kit

published by DHSMar – CA Supplement published by OHSMar- Apr – CA sub-grantee application workshopsApr – State applications due to DHSJul – State funding awards announced by DHSJul – State sub-allocations released by OHSAug – CA sub-grantee applications due to OHSOct – CA sub-grantee awards announced by OHS

Performance period = 2 to 2.5 years

January 2008 Office of Information Security 9

Our Request• Statewide Cyber Security Strategy

– Technical assistance with gap analyses– Development of incident response strategy

and plan– Cyber Security Training (Sentinel)– Development of exercise plans– Participation in Cyber Storm II– Equipment to support activities– Reference materials and other tools for

standards and policy development

January 2008 Office of Information Security 10

Our Request• 2008 Cyber Security Awareness

Conference

• Online Learning Management System for Cyber Security & Privacy Awareness Training

• Online Incident Reporting System

January 2008 Office of Information Security 11

Questions

January 2008 Office of Information Security 12

DHS Resources

• DHS – 2007 Homeland Security Grant Programhttp://www.dhs.gov/xlibrary/assets/grants_st-local_fy07.pdf

• National Strategy for Homeland Security http://www.dhs.gov/xabout/history/gc_1193938363680.shtm

• National Strategy to Secure Cyberspacehttp://www.dhs.gov/xprevprot/programs/editorial_0329.shtm

• National Strategy for the Physical Protection of Critical Infrastructures and Key Assetshttp://www.dhs.gov/xprevprot/programs/editorial_0827.shtm

• National Infrastructure Protection Planhttp://www.dhs.gov/xlibrary/assets/NIPP_Plan.pdf

January 2008 Office of Information Security 13

DHS/OHS Resources

• DHS-NIPP IT Sector Planhttp://www.nascio.org/committees/security/IT_SSP_in_InDesign3.pdf

• OHS Grants Management Home pagehttp://www.ohs.ca.gov/grants.html

• OHS FY 07 Grant Informationhttp://www.homeland.ca.gov/grantsinfo2007.html

• OHS Critical Infrastructure Protection pagehttp://www.ohs.ca.gov/infrastructure.html

January 2008 Office of Information Security 14

Other RecommendedResources

• IT Sector Coordinating Council (SCC)http://www.it-scc.org/

• Critical Infrastructure Partnership Advisory Councilhttp://www.dhs.gov/xprevprot/committees/editorial_0843.shtm

• National Security Telecommunications Advisory Committee (NASTAC)http://www.ncs.gov/nstac/nstac_publications.html

January 2008 Office of Information Security 15

Other RecommendedResources

• NASCIO Privacy & Security Committeehttp://www.nascio.org/committees/security/

• US-Cert posting of DHS-NIPP & Cyber Security Fact Sheethttp://www.us-cert.gov/reading_room/infosheet_NIPP.pdf