The GSN 2015 Digital Yearbook
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
<strong>GSN</strong> <strong>2015</strong> DIGITAL YEARBOOK OF HOMELAND SECURITY AWARDS RECIPIENTS<br />
Most Notable Cybersecurity Program, Project or Initiative<br />
City of Los Angeles - Centralization of Cybersecurity<br />
Incident Data Analysis<br />
<strong>2015</strong> Winner<br />
Awards Category:<br />
––––––––––––––––––––––––––––––––––––––––<br />
Most Notable Cybersecurity Program, Project or<br />
Initiative<br />
Name of Nominated Product, Service,<br />
or Program:<br />
––––––––––––––––––––––––––––––––––––––––<br />
City of Los Angeles Centralizes Cybersecurity Incident<br />
Data Analysis with Customized Solution<br />
Reason this entry deserves to win:<br />
––––––––––––––––––––––––––––––––––––––––<br />
With more than 4 million residents, the City of Los Angeles<br />
is the second largest city in the Unites States. <strong>The</strong><br />
City of LA’s Information Technology Agency (ITA) manages<br />
the IT systems and network traffic for more than<br />
37 departments, including those that support the city’s<br />
financials, taxes and public internet for citizens. ITA is<br />
dedicated to using the most secure, cost effective, highly<br />
efficient and interoperable enterprise-wide technology<br />
to serve the City of LA. In recent years, the cybersecurity<br />
threat landscape has dramatically evolved, with an everincreasing<br />
number of advanced persistent threats and<br />
targeted breaches. State and city governments today are<br />
tasked with safeguarding citizen data and confidential<br />
information, making them a target for malicious threat<br />
actors. Until recently, if an inconsistency or potential security<br />
breach was found, the protocol in place required<br />
pulling security logs from each individual department,<br />
reviewing and analyzing the disparate reports and then<br />
correlating the data manually with multiple security<br />
tools. This was a time consuming process that not only<br />
left room for error, but did not allow ITA to proactively<br />
tackle enough of the cyber threats attempting to infiltrate<br />
the city’s networks. Led by Timothy Lee, the city’s<br />
chief information security officer (CISO), ITA sought<br />
to implement an advanced security information and<br />
event management (SIEM) solution, to help consolidate,<br />
maintain and analyze security data across the city’s multiple<br />
departments. Given the limited resources Lee and<br />
116