1. HSGP Funding for Security Efforts Presented by Michele Robinson

2. January 2008Office of Information Security2 What is the HSGP? U.S. Department of Homeland Security Grant Program Federal funding to help States achieve a variety of prevention and preparedness goals. Supports prevention, mitigation, preparedness, response and recovery activities.

3. January 2008Office of Information Security3 The Cyber Security Piece Many CI/KR sectors are now highly dependent on technology and the Internet Communications and Information Technology Banking and Finance Energy and Water So…just as many are now highly dependent upon robust cyber security as well as physical security

4. January 2008Office of Information Security4 Consider Your State Security Requirement Needs Disaster management –Planning, training and testing/exercise efforts Information sharing & analysis –Communication and collaboration tools Cyber security –IDS/IPS, log correlation and forensics tools Physical Security –Cameras, alarms, access controls All –Computer Hardware/Software –Planning, training, testing plans

5. January 2008Office of Information Security5 Navigating the Application Process Not always clear Moving target Attend the grant application workshop when offered Will take some effort More so, if you are small agency and do not have a grants management unit with experienced grant writers and support

6. January 2008Office of Information Security6 Navigating the Application Process Read through all of the DHS/OHS Strategy and Grant Guidance documents Read through additional resource material Determine your eligibility and Agency requirements Obtain Executive Management support

7. January 2008Office of Information Security7 Navigating the Application Process Follow the application instructions exactly Obtain clarification from the OHS State representative as needed Talk with others who have been successful Take your best shot If you don’t succeed…try again!

8. January 2008Office of Information Security8 Tentative Timeline Jan – Program Guidance and Application Kit published by DHS Mar – CA Supplement published by OHS Mar- Apr – CA sub-grantee application workshops Apr – State applications due to DHS Jul – State funding awards announced by DHS Jul – State sub-allocations released by OHS Aug – CA sub-grantee applications due to OHS Oct – CA sub-grantee awards announced by OHS Performance period = 2 to 2.5 years

9. January 2008Office of Information Security9 Our Request Statewide Cyber Security Strategy –Technical assistance with gap analyses –Development of incident response strategy and plan –Cyber Security Training (Sentinel) –Development of exercise plans –Participation in Cyber Storm II –Equipment to support activities –Reference materials and other tools for standards and policy development

10. January 2008Office of Information Security10 Our Request 2008 Cyber Security Awareness Conference Online Learning Management System for Cyber Security & Privacy Awareness Training Online Incident Reporting System

11. January 2008Office of Information Security11 Questions

12. January 2008Office of Information Security12 DHS Resources DHS – 2007 Homeland Security Grant Program http://www.dhs.gov/xlibrary/assets/grants_st-local_fy07.pdf National Strategy for Homeland Security http://www.dhs.gov/xabout/history/gc_1193938363680.shtm National Strategy to Secure Cyberspace http://www.dhs.gov/xprevprot/programs/editorial_0329.shtm National Strategy for the Physical Protection of Critical Infrastructures and Key Assets http://www.dhs.gov/xprevprot/programs/editorial_0827.shtm National Infrastructure Protection Plan http://www.dhs.gov/xlibrary/assets/NIPP_Plan.pdf

13. January 2008Office of Information Security13 DHS/OHS Resources DHS-NIPP IT Sector Plan http://www.nascio.org/committees/security/IT_SSP_in_InDesign3.pdf OHS Grants Management Home page http://www.ohs.ca.gov/grants.html OHS FY 07 Grant Information http://www.homeland.ca.gov/grantsinfo2007.html OHS Critical Infrastructure Protection page http://www.ohs.ca.gov/infrastructure.html

14. January 2008Office of Information Security14 Other Recommended Resources IT Sector Coordinating Council (SCC) http://www.it-scc.org/ Critical Infrastructure Partnership Advisory Council http://www.dhs.gov/xprevprot/committees/editorial_0843.shtm National Security Telecommunications Advisory Committee (NASTAC) http://www.ncs.gov/nstac/nstac_publications.html

15. January 2008Office of Information Security15 Other Recommended Resources NASCIO Privacy & Security Committee http://www.nascio.org/committees/security/ US-Cert posting of DHS-NIPP & Cyber Security Fact Sheet http://www.us-cert.gov/reading_room/infosheet_NIPP.pdf