US govt CIO group issues cyber attack response guide

The US National Association of State Chief Information Officers (NASCIO) has published guidelines to help states prepare for and mitigate the impact of major cyber attacks.

The association has published a three-part guide on state government cyber disruption response planning.

The guidelines serve as both an implementation document and a call to action for states to develop plans to limit the disruption of the business of state government in the wake of a major attack.

It includes a report on cyber disruption response planning, a checklist and a cross-functional process description. Together, the three parts provide guidance on governance, communications and operating discipline for the planning process.

NASCIO is working with the US Department of Justice’s Bureau of Justice Assistance on planning guidance to help states develop an approach that brings together agencies including law enforcement, Homeland Security, emergency management and the National Guard.

NASCIO Executive Director Doug Robinson said a collaborative approach to state cybersecurity is crucial.

“Cybersecurity is a team sport, and these partners bring the necessary capabilities for responding to a major cyber event that could have dire consequences.”

The association plans to update the guidelines based on this work, as well as input from the states and other stakeholders.

Image courtesy of Mike Mozart under CC