Energy, Communications & Cybersecurity Subcommittee Meeting Packet, October 18, 2023
Summary
Meeting packet for the Florida House of Representatives Commerce Committee, Energy, Communications & Cybersecurity Subcommittee, for Wednesday, October 18, 2023, 10:00 am – 11:00 am, with Mike Giallombardo as Chair. The agenda lists a Cybersecurity Update from Florida Digital Service. That presentation states that the State Chief Information Security Officer is responsible for development, operation, and oversight of cybersecurity for state technology systems, reports 375 total attendees at Florida's Inaugural Public Sector Cybersecurity Summit, and says Thirty agencies participated in a comprehensive risk assessment. The packet also includes a local government cybersecurity statute from The 2023 Florida Statutes.
Summary drafted by a model from the document's text below and checked by script against that text before publication. It is a navigation aid, not a reading of what the document proves. Where AI is used
Cite this document
“Energy, Communications & Cybersecurity Subcommittee Meeting Packet, October 18, 2023.”
Archived at Pandemic Darlings, https://pandemicdarlings.com/source-documents/2023-10-18-3226-energy-communications-cybersecurity-subcommittee-meeti-0b0a925864/
, SHA-256 a02ed0d7c7eb2faa2663a8ee22ac8dfdb308d1111e8a0b6e7f29aaf3f7ee77eb.Full text
Energy, Communications &
Cybersecurity Subcommittee
Wednesday, October 18, 2023
10:00 AM
Reed Hall (102 HOB)
Meeting Packet
Paul Renner Mike Giallombardo
Speaker Chair
The Florida House of Representatives
Commerce Committee
Energy, Communications & Cybersecurity Subcommittee
Paul Renner Mike Giallombardo
Speaker Chair
Meeting Packet
Wednesday, October 18, 2023
10:00 am – 11:00 am
Reed Hall (102 HOB)
I. Call to Order
II. Roll Call
III. Welcome and Opening Remarks
IV. Cybersecurity Update from Florida Digital Service
V. Closing Remarks
303 House Office Building, 402 South Monroe Street, Tallahassee, FL 32399-1300
(850) 717-4870
Cybersecurity | Florida Digital Service
1
Empowering Florida's Digital Resilience
Within the Florida Digital Service, the State Chief Information Security Officer
(CISO) is responsible for development, operation, and oversight of
cybersecurity for state technology systems.
Our Mission:
• Ensure availability, confidentiality, and integrity of state systems.
• Safeguard state agency digital assets, data, information, and information
technology resources.
• Establish standards and processes for assessing state agency
cybersecurity risks and determining appropriate security measures.
Delivered through vigilant oversight of the State Cybersecurity Operations
Center (CSOC).
[L l2
Org Chart
DMS
FL[DS]
Chief Technology CISO - Chief Information
Chief Data Officer
Officer Security Officer
DCISO - Strategy DCISO - Operations
ESF 20
Security Planning & Policy Cybersecurity Programs & Incident Response
Architecture
Governance, Risk, and
Security Engineering
Compliance
Security Training &
Network Security
Community
3
Cybersecurity Requires
Engagement Across the Enterprise
• Florida Department of Law Enforcement - Intelligence, investigations, and
technical analysis
• Department of Management Services’ Division of Telecommunications -
Network security and availability
• Department of State - Shared resources and support
• Florida Division of Emergency Management - Cybersecurity grants and ESF20
• Many others - State enterprise agencies, local government entities,
universities, etc.
[L l 4
Cyber Community
• FL[DS] CoLab offering ISC2 continuing education
credits
• 22 total cybersecurity sessions
• 350+ attendees
• 7 sessions eligible for CEUs since August 2023
• 34 state agencies represented in at least one
cybersecurity workgroup
• Enterprise Security Leaders meetings and 6
domain specific workgroups held each month
5
Cyber Community _
Throughout the Month
All agency CSIRTs participating in the first-ever
enterprise cyber training exercise SU MO TU WE TH FR SA
October 11 1
FL[DS] Presents Effective Policy and Processes
for Incident Response and Threat Hunting 2 3 4 5 6 7 8
October 17 9 10
0 12 13 14 15
FL[DS] Cybersecurity Presents How Traditional
Email Defenses Fail Against Modern Attacks
16
0 18 19
G 21 22
October 20
23 24 25
0 27 28 29
A Deep Dive into the Local Government 30 31
Cybersecurity Resource Packet
October 26
Virtual Training Exercise: Anatomy of an Attack
6
Cybersecurity Operations Center (CSOC)
Solution Adoption
Enterprise Cybersecurity Solution Agencies Adopted / Implementing
Cloud-based Unified Security Suite 28
Managed CSOC Solution 24
Asset Discovery (Agent) 17
Asset Discovery (Agentless) 20
External Attack Surface Discovery 34
Endpoint Protection (EDR) / Managed Response Services 24 / 16
Content Delivery Network 13
Licensure and Credential Access Management Platform 8
[L l
7
Security Operations – Extended Response
Ingestion and evaluation of events
Security Event Management
Significant threat analysis to deal with volume Correlation of the events to alerts
of security event data.
Rapidly correlate against other agencies and De-duplication of alerts to
share information to prevent other triaged alerts for review by the
FL[DS] and agencies
compromises.
triaged alerts were
Incident Response Identified as
true
Support affected agency efforts to bring an
incident under control, expel bad actors, positives
recover their systems.
[L l
8
Strategic Planning
CIO and
CISO
Engagement
Cyber
Advisory
2024 Risk
Assessments
Committee Statewide
Cybersecurity
Strategic
Plan
Cyber
ASOPs Advisory
Services
[L l
9
Risk & Compliance
Thirty agencies participated in a comprehensive risk assessment.
Risk
Agency Risk Enterprise
Remediation
Assessments Risk Rollup
Roadmap
Five agencies provided their own results.
[L l 10
Comprehensive Risk Assessments
Moving forward:
• Gathering requirements for an enterprise Governance, Risk, and Compliance (GRC)
platform - 29 agencies indicated demand for a GRC tool in their ASOP.
• 60GG-2 Revisions - Drafting language for the rule. Will use themes uncovered from
the risk assessments to incorporate standards.
[L l11
Cybersecurity Positions and Training Guidelines
• Includes basic descriptions for 36 roles based on NICE framework
• Provides advancement levels and training specifications across 7 domains
• Distributed training curriculum as required by F.S. section 282.3185 & 282.318
• Security awareness training (all government employees)
• Advanced cybersecurity training curriculum (for elevated access)
A.1 CYBERSECURITY WORK ROLES AND RECOMMENDED ROLE BASED TRAINING
Currtnt wndlng lnoneoithefoiow,ng
eertllu t,on$.C
• ~SCl2 ln/orm11,on SeculitySymrn
Prof65,onal(CISSP)
• ISACACffllfied lniofmatx>n s«u1ityManage1
(CISM)
• ECC01.JncilCert,~edChief lnf0<mation
t11oehelor'ldegrttlncom""'erKlen::e, u:,;,ell~nl~ionl_,kl,lre•U'r • (1SC1l~rtifledCloudSe<urhy • 0SC:)2Cer111'edekM,d • ~ 1ndlw:l"IOIJflYJ,;I -ce<tWlcJtlonmlln!e,..r«reqt,l,ement1by
computer,nglnecrlris,l nlOffl'llll i<>n •y•tems, b'l,oxompl~lnordettome<:1 (CCSl'I Prclie,Montl(«fPI , n,:ndlnsrclcv..,1confo,-scmTMr$,~in.rs...,d~lrf
com~e, lo,~i<:\;, or n.'4;11(.'d di<dp!ine l he mioimum<;O!,~ftutlon,; ~"-d • AWSCC<\Wl<.-d Securi ty • GIA(Ooud f-• Re<pondet ronvention<, ;,nd conductlnclol'lf ,;1uoiy. ll<.'qUirerr,c,,1,a,.....,.. Minimum
Dq;,ec r'-'Cjuinement m~ be w ai..,.J b•>ed on for the po,ition of Clo<.! f<>rcnsi<> • Mkro><>lt (,rtific<I: A,..-., jGCfR) of40hwr,of,;oritinuir,c«l~ionpi,ry,,•ri>=ommcrded.
?fol""""""l exp,,riB>OO An~t;tho..tcerttfic~!ior-....,r,at •und~me nt.ol, • GIA(c.rt,fiRdf-oranoj,; ' - " -
u""'ntedheNt • Gqlo!Prot<M.<!on.i,leb.d jGCH) RECOMMENDED ootl'TINUING EDUCATION
S<,curiry("linttr • Micrudreertiled, AnnS« • Affi!ndcou<W1wt h .. !o,.NSS((S<ll: CloudSecvri'Y, Att-=k.,..
• GI.-.CCloodlhr~~lon l,..._,_..., fechnk!u,:51,Monhorlr'l,.andthr,ai: Oe\cctlon
lfl«l1lli,cMlltures,rn.N6ei,ln,d ~or'ide:6rte ln compu te r ~. • CompTI A,-ietwork• • CompllAAlt,truclSecurlty 1ndiYiduili'"'-'",,_Cer11tlutlonmllnteN<Ke ftqu1femenuby
mon"3riwsie.m.ne1...onr.,, C'/bffiecurlly, lnfo,rmMIM l echnology,orll • Compll ASefwr• Aelmlnlil r..WA>soo.Me Prldltloner(CASPCll ""end"' releYkll COnl~ sem!Nn,wetilNl'lanclllndunr,
1p"'lcatlon'i,1nd de'wces lo,r 1he rel1 teddt>Clpllne,Degrttrec,.,1<emtl'!lm1y • CompTI ASecurlty- • Mlcrosof1lUCer,,ficd·s«urity • 0SCl2Cerllflecllnfor ....1km con..e,,UOl'lf, kld coriduct lnJself·~ud\r. !leq,.llrementsYWy. Mitll,,..,m
e"terprlie. 100\'ltllle!; t,eQvedbaw!dOl'lp~ i o N l e , , ~ . • CompllAUruo• /!ldmlni!il rlllO<M!.Odate ~l'roMwonal(CISV'l of40houri; olconUnui~educatiofl pe.-yc11rlsrecomn'll!l'dcd.
w!!K?fiibiliticoM><lmaintains the • GompTIACbu,,_ • C"'-0Cort1ficclNctwMAssoc;a1c • IWACertifiecllnkor....t,Ol'I
p•leh m-emenl procr1m. rh,. Recomm end --.dor•opecifit U!ftific.ot.,.,. • EC.(our,c~Certified Network (CCNAl Sec,,.;ty,.,....er!(IWI ll;(C0M M(N0£000NTINUINGEOUCAT10N
poo;funind"°"" ~"toinin1 loa,~onwchnolOl'f'in""'the Octerder(CNOI • .1.tt<!nd 1T11nincon8usi..,.,Continoity ..,dOi•"'terRec,_,..,
.,..,em Hr.,willll, .-.ti•vlru, ~n-.lronl'N!l'lf (ouch,, Wlrdow>, Un ... , !OS. • (&µ Sl""'m Se<utiry~rt rlled • Complo,te ~ •llatian 1nilnJngwlthin-Ml<ro,.olt Cenilird1r~,
P'"lr;om.,, ;mdm.o"°'IJl"I""" ,.......,.,,,,Cl«o,P•loAho,ctc..1,well""•"fPrOCU-(~ <u<h ... S..Curily,C<,mpllonce, &.ldenUty Furdomoril•b;E.-dpolnt
- . lroub~tiil!<WtSindcloudl nfr;,nruc1u~ lnuse) Adm lnJ1triW;orlCl<!nt, (y&.SoervlcES
d!entiyikmi,IMIPN~ides
1«hnlc:1I WPl)Orl to users. ~mende-d i:ybenecurltycerUflcatloM lleCOmmeNI at~n ~ OMOI' ll'IOl'ed l he lollowl~ i.pttllltv
are h tcdbVlevelOl'l therlfhl. cer1lflc1tloftSifrele\lanltothe erilefprfieet!WOnme111:
• Mierosoh o,t>e=laity Arehlt«i
• Micro>ohldcf1tity;nj Aa:.,..f<dmii>islfiltof
• Red H.al Ce rtit,ed SynermAdminim•!OftRHCs.A]
• VMw.,.,Ce rtifiedProln1ionlll · D•a Cen1erVirt ualiut ion
Elachelor'sDQ,"""lnmmpu1ersclN"1te, • Neiolfl!flfnstruc1ureUbl'lf'/ • GIAC*,..;tv(nef'il:illl • OSCl1Cnef\ed1nfonN10Jn Individual, rrutt , , _ cen~ication malnteN1ncerequlremeffls by
w u ~ con,buslnl!u inlornutlonsclence, technlcal wming. or a (IT l.l Foundafions Cenih:ffl<>n(GSEq Seclffly~(CIW') anendlntrelevkll conlerera,s,w,m!nan, Wl!b intrsar,dlnduslfV
• P"'b 1klrn,, lndudirc ...,pt!Qllon rel;ited•nal'll bfleld . D,:gn,c ~ulremem • CompTI ASec,..IIV• • ECCau"dCcnWledSllcu11y • ISAU.(er1111cdl"'°'mM,on COll"'!<Ul0M,i1ld coriduc1ln1sei f ~ud\,. 11,:quir,:rr,ent:;w,ry. Mlnl,,..,m
~ ~ e d l w dware, m.vbe w•Mlcit....edOl'lp,.,,e,.lonail , oscµs1"1emSecurltyCe rtrfled Anaiil"I (~CS.-.) Sec..ttyMlnailerlCIWI of40houn: olwnbnui,.educ:auon per~•rlsrecommended.
endpolnt~•rd d!t~=. e, perience. ~litloner(sscP) • Co~tlA('fbffiec~vAne~i
Dc,,clop,...,...V?c, andp,lorlti1c (C.,SA•) RlCOMMENDlDCONTINUING EDUCATION
""'°""'ment,,peclfication,lor Currr,nt,tanclincin atlcast oneofl he • Co~flA,f,,/yor,cedSccu1rty •-'tu,ndwmpl i-e1T1inir<e /o,dat••nda,;,;:eum;,_..,.,.
drn,iop,n •rld1.-.12n. lollowinccefllfic:ationo b..edoncenihc•tion Pr«lillOIW!l!CASl'•f • M;oinl•<nfarn,iaril',>withNISJMKIOSCritiulSe<urilyControh
12
levmnoted10 -ri1t11 • Attend-,r,u•llhreat if'il:elligence 1..;,.;,. 1roms.-.NS(orother
provld.,,)
• Pndpo1eln..,.,.l lncid""'""fl"""'tobl<!1ep,a,n;,r-io"""rtl..,.
Florida’s Inaugural Public Sector Cybersecurity Summit
September 14, 2023
• 375 total attendees
z a • 275 public sector attendees
• 85 local government attendees
SUMMI T • 21 higher education attendees
13
Local Government Cybersecurity Packet
The 2023 Florida Statutes 2023V1.0
Title XIX ChaRter 282 View Entire Chapter
PUBLIC BUSINESS COMMUN I CAT IONS AND DATA PROCESSING
282. 3185 Loca l government cybersecurity. -
(1) SHORT TITlE. - This section may be cited as the "local Government Cybersecurity Act."
(2) DEFINITION. - As used in this section , the term "local government" means any county or municipali ty.
3
1. ~D=,iL,.----..,,...,__,...,,q-_._....,_ _ _- _ _ _..,,__=...,....,..,,,=-=-lgovemment
employees with access to the local government's network must complete the basic cybersecurity training within 30
days after commencing employment and annually thereafter. THE
2. Develop an advanced cybersecurity training curriculum for local governments which is consistent with the
cybersecurity training required under s. 282.lla(3)(g) . All local government technolo!!Y professionals and LOCAL GOVERNMENT
employees with access to highly sensitive infOfmation must complete the advanced cybersecurity training within 30
days after commencing employment and annually thereafter. CVBERSECURITY
(b) The Florida Digital Service may provide the cybersecurity training required by this subsection in
collaboration with the Cybercrime Office of the Department of Law Enforcement, a private sector entity, or an RESOURCE
institution of the State Ur1iversity System .
PACKET
CYBERS
standa rds must be consistent with generally accepted bait practices foc cybersecurity, including the National
Institute of Standards and Technology Cybersecurity framework.
(b) Each county with a population of 75,000 or more must adopt the cybersecurity standards required by this
subsection by January 1, 2024. Each county with a population of less than 75,000 must adopt the cybersecurity A CORE RESOURCE
standards required by this subsection by January 1, 2025.
FOR LOCAL & STATE GOVERNMENT
(c) Each municipality with a population of 25 ,000 or more must adopt the cybersecurity standards. require d by
this subsection by January 1, 2024. Each municipality with a population of less than 25,000 must adopt the CYBERSECURITY COLLABORATION
cybersecurity standards required by this subsection by January 1, 2025.
IN THE STATE OF FL ORIDA
(d) Each local government shall notify the Florida Digital Service of its compliance with this subsection as soon
as possible .
f
I• (5) MO IF~(I( ~QN - ransomware incident to the
Cy~--- ~ - -......- - - -- ....--...........~..---..--~--.....,....- _... orcement, and sheriff who has
jurisdiction over the local government in accordance with paragraph (b). The notification must include, at a FL[D IG ITAL SERVICE]
minimum, the following information:
1. A summary of the facts suTounding the cybe..-s.ecurity incider1t or ransomware incident.
2. The date on which the local government most recently backed up its data; the physical location of the
backup, if the backup was affected ; and if the backup was created using cloud computing.
3. The types of data compromised by the cybersecurity incident or ransomware incident .
4. The estimated fiscal impact of the cybers.ecurity incident or ransomware incident.
14
FY 22-23 Local Grants – Highlights_
337 local entities applied for local More than 730 deployments of 96% of participating local entities
grants, representing 66 out of cybersecurity capabilities across committed to sharing
Florida’s 67 counties 193 local entities cybersecurity data with the CSOC
15
“It has fulfilled a tremendous need. We are a rural fiscally
constrained county and without the assistance we would not
have the added security that we have now and hope to
continue.”
- Holmes County Sheriff's Office
16
State & Federal Cybersecurity Grant Programs FY 23-24
• Portion of funds dedicated to rural communities
$11.9 • FL[DS] and DEM collaboration for grant management
• FL[DS] and Domestic Security Oversight Council (DSOC)
million
collaboration for planning committee
• Focused on Florida local governments
$40 • Funding for cybersecurity risk management programs
• Emphasis on risk management programs, cybersecurity
million
standards, and vulnerability mitigation [L l
17
Questions?
Please contact Jeff Ivey, Deputy Chief of Staff
Jeff.Ivey@dms.fl.gov
18
File and source
- File
- 2023-10-18_3226_energy-communications-cybersecurity-subcommittee_meeting-packets_mtg14007.pdf
- Size
- 5,188,964 bytes
- SHA-256
- a02ed0d7c7eb2faa2663a8ee22ac8dfdb308d1111e8a0b6e7f29aaf3f7ee77eb
- Our copy
- 2023-10-18_3226_energy-communications-cybersecurity-subcommittee_meeting-packets_mtg14007.pdf
- Original
- No public link identified.