The agency has aided in a lot of state modernization efforts. For example, Access Indiana is the state’s solution for a single login for online state services, as well as a move to the cloud. The state has been working to improve cybersecurity threat assessment as a whole, made possible in part through legislation that mandates incident reporting.
Following the signing of that legislation, IOT began an informational tour of sorts, getting information about the law to the state's 92 counties to share information about how the state could support these local agency improvements.
The state has the resources to tackle big tech challenges, but local agencies are not always so fortunate. The Office of Technology started to share the wealth of knowledge and resources they have access to as a result, explained Graig Lubsen, the agency's director of communications and external affairs.
The initiative started through a desire to help understand and combat local cybersecurity vulnerabilities, as they impact the security of all state systems. It has since evolved into the state offering local governments a host of tools ranging from having their websites hosted on the state domain, use of Google Suite tools, cybersecurity training, assistance with payment processing and the ability to join the Access Indiana platform.
The offerings are in various stages of adoption. For example, IOT officially started offering access to cybersecurity training in April 2022, while the ability to use the in.gov domain has been offered for years.
The goal with each of these offerings is to use the state’s resources and purchasing power to provide local governments with either more security, a better experience for citizens or cost savings.
“If it checks one of those boxes and we can make it work, it’s something we pursue,” he stated.
Lubsen said that IOT’s domain offering is being used by all levels of local government, from health departments to sheriff departments, noting that the .gov increases public trust for users.
At the time Lubsen spoke to Government Technology, IOT had made it through 50 of 92 counties so far on the informational sessions.
“Really, we’re just seeking to help local governments access high-quality services, at either no-cost or low-cost,” he said.
MAKING A LOCAL IMPACT
Joann Spaulding, Vital Records Professional – Capstone, is an administrative assistant in birth and death records for the Clinton County Health Department (CCHD). Spaulding is also one of the primary users of the IOT-hosted CCHD website, the shift to which started about a year ago.
Spaulding said that CCHD’s previous website did not offer the level of security that was needed to ensure trust and privacy for things like receiving payments and transferring sensitive documents like birth certificates.
Working with IOT enabled CCHD to offer a smoother and more secure process for users and staff alike for transactions involving things like birth certificates, death certificates and food permits.
Staci Young, assistant to the mayor and representative for the city’s IT governance committee for the city of Warsaw, explained what led her city to work with IOT to participate in the cybersecurity training offering.
The city was exploring cybersecurity training for employees for 2023. Through a partnership with IOT, the city was able to use KnowBe4 — security awareness training — at no cost. While the actual training has yet to begin, the city has started the cybersecurity improvement initiative with a phishing campaign to assess vulnerabilities with employees.
“The world that we’re living in right now dictates that everyone needs to really be building those layers of security, and shoring things up, and making sure you’re covering all of your bases,” Young said, underlining the cybersecurity risks that often target government organizations.
Although state government and local government operate differently, their work is often “woven together,” she said.
The city has also been using a state-owned domain for about 10 years, she said, which increases public trust among residents and businesses alike.
Looking ahead, the city is considering participating in some of IOT’s other offerings, like the single sign-on program and the payment processing tools.
