2. GoToWebinar ® Attendee Controls Grab Tab Audio Pane Use Settings to configure and test audio and other preferences. Click arrow to hide or show control panel Click hand icon to raise/lower hand Control Panel Question Pane Enter questions here. Control panel options may vary slightly depending on webinar configuration. Click Help at the top of the Control Panel to access online help and links for Tech Support. Technical Assistance

3. Asking Questions Type questions into the question pane at any time. We will try to answer the questions verbally at section endings. If we do not get to your question during the webinar, we will follow-up with you after the presentation.

4. DIR Team Eddie BlockJohn Van HoornNancy Rainosek State Chief Information Security Officer Director of Enterprise Solution Services Enterprise Governance, Risk, Compliance Program Manager

5. Agenda HB 1, Section 9.10 Background Legacy Assessment Overview Cybersecurity Assessment Overview Archer portal demonstration Wrap-up, Q&A

6. Why? House Bill 1 - Article IX - Sec. 9.10 requires the Department of Information Resources to submit a prioritization of state agencies' cybersecurity projects and projects to modernize or replace legacy systems, as defined in the October 2014 Legacy Systems Study, to be considered for funding to the Legislative Budget Board by October 1, 2016. In order to be included in this prioritization, agencies must submit information about their requests to DIR through the Archer portal.

7. General Info Webinar & tool release: February 4 Submission deadline: Agency LAR due date Does not apply to Higher Education Webpage: http://dir.texas.gov/View- Resources/Pages/Content.aspx?id=54http://dir.texas.gov/View- Resources/Pages/Content.aspx?id=54

8. Organization

9. Part 1: LAR Info

10. Part 2: App Info

11. Poll #1 How many legacy modernization related projects does your agency anticipate submitting?

12. Part 4: Legacy Questions

14. Q & A

15. Poll #2 How many cybersecurity related projects does your agency anticipate submitting?

16. Cybersecurity Assessment Part 3: Cybersecurity questions Part 5: Risk identification Part 6: Probability determination Part 7: Impact ranking Organizational security program assessment impacts PCLS score.

17. Part 3: Cybersecurity Q’s

18. Part 5: Risk Identification

19. Part 6: Probability Determination

20. Part 7: Impact Determination

21. Risk Determination

22. Q & A

23. Poll #3 How many people do you expect to be involved with completing your project assessments?

24. Archer Portal Demonstration Logging in Navigating dashboard & workspace Delegating Editing and saving progress Reviewing and submission Hints & Support

25. Logging in URL: https://egrc.archer.rsa.com/Default.aspxhttps://egrc.archer.rsa.com/Default.aspx Instance: 20224

26. Dashboard

27. Dashboard – New record

28. New Record (project)

30. General Instructions

31. Select project category

32. Delegate to

34. Assign Reviewer

35. Saving Progress

36. Accessing saved projects

37. Editing a saved project

38. Submitting

39. Tips and Support Use the instructions document for recording responses Do not use the browser’s back button – press the x in the upper right Save often! Click the icon for help text Email GRC@dir.texas.gov for technical assistanceGRC@dir.texas.gov Email pcls@dir.texas.gov for content questionspcls@dir.texas.gov

40. Q & A Submission deadline: Depends on when your LAR is due. Submit prioritized list to LBB October 1

41. Thank you For additional information contact: pcls@dir.texas.gov