1. USDA 2016 Financial Management Training Transforming Shared Services Cyber Security Presented by Jack Blount

2. Cyber Security Governance 2 We work within a complex and well-designed set of government policies and standards

3. High Profile Breaches of 2015 3 “There are two types of American companies: those that have been hacked and those that don’t know it yet!” James Comey, FBI Director More than 790 MAJOR Cyber Breaches of government agencies or businesses in 2015

4. Business Impact of a Data Breach 4 One example out of hundreds

5. 5 Nature of Cyber Attacks Today Russia spent $30B in 2015 with a team of over 2000 IT experts attacking US government and businesses 24/7

6. Why is USDA a Target? 6 Payroll 650K+ civilian employees Over $2 billion in bi-weekly paychecks Interface with 170+ Government Agencies Interface with Treasury every day Process financial transactions for government in excess of $200B Maintain extensive critical PII Data FBI has identified OCFO datacenters as the government’s 4 th highest value targets USDA

7. How Does Cyber Security Affect You? 7

8. 8 Cyber Security Overview

9. Cyber Security Is Job #1 For Everyone! Public WiFi is the #1 source of “infections ” Safeguard intellectual property, financial data, business plans, PII, etc. Data encryption is your best safeguard Keep work and personal data/systems separate. Don’t use home computers, applications, and email accounts for government use. Heading out of the country? Consider signing out a temporary notebook that can be quarantined when you return. WiFi connections are not secure. LinkedIn, Facebook, and other social media may be used to target you and your data. Encryption is critical to protect government data. Stay current with updates and follow usage and storage policies. Think before you click! A breach is just a click away. Shoulder surfing is prevalent on planes, in coffee shops, and in hotel lobbies. 70% of all breaches start with a malicious email

10. 10 What USDA Is Doing USDA has created a Cyber Security Strategic Project Identified weaknesses and vulnerabilities Purchased and implemented new hardware and software cyber technologies Implementing new business oriented solutions Changing cyber policies and procedures We need cooperation and buy-in from everyone to keep USDA secure!

11. 11 Never store PII data unencrypted Never store PII data on a personal device Never click on a suspicious link Never use simple passwords Never store your passwords unencrypted Never share your password with others Never use a shared account Never fail to report suspicious activity, emails, texts, file shares, PII, etc.. What You Can Do

12. Questions USDA Transforming Shared Services12