|
Defend against certain threats and not others? That's a gamble, whether you're protecting your home, your health or your hybrid SUV. It works only so long as threats materialize solely where you've prepared.
Cybersecurity in state government too is plainly no place for shaky bets. Two sure ways to tilt things in our favor are to, first, defend across the board, and second, involve more allies in a shared defense.
Both are built into GTA's plans for further invigorating the state's cyber defenses. In fiscal year 2025 just started, cybersecurity gets a power booster as GTA's Office of Information Security aims to implement key security measures more broadly. Tools and tactics in use and proven effective already at a set of key state agencies will be extended across the whole of Georgia's executive branch.
What tools? To simplify, three. Used together and uniformly across all agencies, they make a powerful combination. Crowdstrike for endpoint security (i.e., for staff computers). Splunk for security incident management when trouble arises. And Tenable, in combination with Crowdstrike, for vulnerability management to help identify weaknesses that need attention. And I could add a fourth, Proofpoint for security awareness training -- already in place.
The tool names are for IT folks, but the benefits are for all of us. Benefits like better visibility and coordination of security efforts across the whole of state government. That alone is so valuable because we are all in this together. Our systems are connected, and security incidents can spread fast. If one entity is vulnerable, there's risk for others.
As GTA's security team partners with additional agencies to implement these measures, the state will also see its ranks of security monitors grow. That's more trained eyes at more agencies that know how to spot cybersecurity concerns and how to plug in to state resources for support if and when incidents arise.
We aim to be well advanced with implementing these steps even by the close of this calendar year. We'll need your help to do it. I'm not expecting everyone, in every department at every agency, to make cybersecurity job 1. It does though have to be a key part of any job that involves our government systems and data.
That's at the heart of this expanded cybersecurity push in FY '25. It explains why OPB, the Governor's Office and the legislature have all put their backing behind these efforts. And it explains why I'm asking for your collaboration. Work with us to get these security measures in place across Georgia's executive branch, and beyond. GTA's Office of Information Security has mobilized to implement these tools. They're ready to partner with you and answer any questions. (GaCyber@gta.ga.gov). I thank you in advance for your part in improving the odds of successful cyber defense.
Shawnzia Thomas
State Chief Information Officer
GTA Executive Director
|