1. October 10, 20071 Better Together – The Road to Responsible Information Management Presented by Colleen Pedroza, State Information Security Officer

2. October 10, 20072 Office of Information Security & Privacy Protection Coming Soon! SB 90 creates new Office in State & Consumer Services Agency Effective 1/1/08 Government Code 11549 Mission: Uniting consumer privacy protection with the oversight of government’s responsible management of information to ensure the trust of Californians

3. October 10, 20073 Office of Information Security & Privacy Protection Office of Privacy Protection Executive State Information Security Office Consumer Focused Consumer Assistance Information & Education Best Practice Recommendations Government Focused Policy, Standards, Guidance Assistance & Advice Education & Awareness Compliance Monitoring

4. October 10, 20074 Responsible Information Management Blueprint for comprehensive approach to management of information –Personal, confidential, and sensitive information –Critical infrastructure –Information assets –People, processes, and technology –Physical and cyber security together

5. October 10, 20075 Did Henry Ford think about safety?

6. October 10, 20076 The World’s First Home Computer 1954

7. October 10, 20077 Car Safety 1960s- 1990s

8. October 10, 20078 Records Management of the 1960s - 1990s

9. October 10, 20079 The Road Most Traveled Silos common Viewed as a tactical function Old forms never die ISOs and Privacy Officers not always taken seriously Misnomer that it applies only to IT Viewed as “$ecurity = $$$$” and a “bolted on” option New laws and regulations make compliance difficult Limited employee and contractor training Incident numbers growing

10. October 10, 200710 The Road to Responsible Information Management Be an advocate - It must start at the top! Recognize the information your agency has is a strategic enabler for mission accomplishment Achieve compliance with laws and regulations Create a governance structure - Enlist all departmental resources Collaborate with other agencies Work with the Office of Information Security and Privacy Protection

11. October 10, 200711 What’s In It for You as an Executive? Increased business success/resilience Performance improvements Online (e-government) initiatives can be realized Security is integrated into your business processes Decreased risk to operations and business

12. October 10, 200712 What’s In It for Californians? Increased public confidence and trust –They can’t take their business elsewhere –The knowledge that Government is taking this seriously California Government must be a leader in responsible information management Californians are counting on you to manage our information responsibly

13. October 10, 200713 Nirvana – Better Together! Be a leader in the paradigm shift Be proactive vs reactive – embrace responsible information management Implement concepts as part of the core business principles Empower your ISO and Privacy Officer! Make it a department-wide effort! Start small, lay out a plan, and continuously improve Be a model for others

14. October 10, 200714 Don’t Forget to visit the Sponsor and Exhibitor Booths!