Ige joins other governors in cybersecurity pledge

Gov. David Ige has joined 38 other governors in signing a cybersecurity compact in an effort to enhance state cybersecurity and develop the cyber workforce.

The “Compact to Improve State Cybersecurity” is part of the National Governors Association’s “Meet the Threat: States Confront the Cyber Challenge” initiative.

The compact notes that state information technology systems are attractive targets for hackers and other bad actors because they collect and store massive amounts of personal and financial data, and because the states own or control critical infrastructure.

“Cyberthreats pose serious risks to the core interests of all states and territories,” according to the compact. “Recent cyber intrusions have stolen volumes of confidential data, exposed critical services to disruption and resulted in significant economic impacts to states.”

Hawaii Chief Information Officer Todd Nacapuy said earlier this year that would-be hackers are probing the defenses of state networks up to 45 million times a day in an effort to find vulnerabilities in the system.

The national compact commits the states to developing a statewide cybersecurity strategy that emphasizes protecting the state’s IT networks, defending critical infrastructure and building the cybersecurity workforce.

It also calls on states to conduct risk assessments to identify cyber vulnerabilities and threats, and to assess the possible consequences of cyberattacks and resources available to cope with those threats.

Among other steps, the document urges states to assure information is shared between state IT, homeland security and emergency management officials, and to incorporate the National Guard’s cyber capabilities into cyber response plans.

It also urges states to work with the legislative branch to expand the circumstances under which the Guard can be activated, if necessary.

“The top priority of any governor is the public’s welfare and safety, which now includes protecting citizens from cyber threats,” Ige said in a written statement. “I am proud to join my fellow governors in signing this compact and committing to its recommendations.”

The compact also commits the governors to try to grow the nation’s cybersecurity workforce, which may include encouraging colleges and universities to seek National Security Agency certification as a Center of Academic Excellence.

It may also involve partnering with colleges to increase the availability of two-year cybersecurity degrees, and creating a program to assign qualified college students to state agencies as low-cost, skilled cybersecurity interns.

Nacapuy said in a written statement that the state has already taken steps toward the goals of the compact by establishing a state chief information security officer and offering cyber internship opportunities. Hawaii has also been supporting programs that encourage high school and college students to explore careers in cybersecurity, he said.