[{"_1":2,"_88":-5,"_89":-5},"loaderData",{"_3":4,"_26":27},"root",{"_5":6,"_17":10,"_18":19,"_20":21,"_22":10,"_23":-5,"_24":-5,"_25":10},"user",{"_7":8,"_9":10,"_11":10,"_12":-5,"_13":-5,"_14":15,"_16":-5},"roles",[],"isAuthenticated",false,"isPremium","planName","subscriptionStatus","featureFlags",{},"insightsBudget","isDevelopmentHost","userPreferences",{},"recaptchaSiteKey","6LcvOJcUAAAAAHsB-gPGfGktcRlKpH7OTIU_dMTD","isImpersonating","impersonation","affiliateStatus","isFreedomPortal","routes/v2/article/layout",{"_28":29,"_30":31},"notFound",true,"relatedArticles",[32,76],{"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":74,"_75":74},"mediaId",6343069,"mediaKeyId","2252894-57d6dd8017afb0686f72eece748728ef","parentId",2252894,"title","State CIO presents data center, enterprise IT services and data‑sharing progress to committee","audioSeconds",2542,"startMs",2299000,"endMs",4841000,"viewUrl","/Search/View?dp=1&key=2252894-57d6dd8017afb0686f72eece748728ef&start=2299&end=4841","thumbnailUrl","https://assets.pipeline.soar.com/2252894-57d6dd8017afb0686f72eece748728ef/thumbnail_2299000.jpg","articleUrl","/articles/6343069/Oregon/State-CIO-presents-data-center-enterprise-IT-services-and-datasharing-progress-to-committee","mediaUrl","https://secure.pipeline.soar.com/6343069-05223755a3195587f5d5066895cbfd40/orig.mp4?Expires=1770922572&Signature=iyGbf6dePdYLLrEgRBzvHHAcb8a5IJzqVPqnZdZd6tXxHnxslB26uZ4wf~OT0xe4zexG5drgDCjTOG-02~w60bnQXq4rAFpXi-JOghykVjfrcdqYr06mNh6rI9cLR1gFsC15EeTi9JjQH09eGgTtm7KIFvdlqgzAmKJtQclJoXW~VS73wnFO6TSypxEZrxNehGumZnJiIKvinbHWR6YgbTbolDSacpqNYJVgwS-a9KDgn~nhvLt8Kn5icrPYAotGXIuY81PYXJxFTkRbKWZDnCl88o0X9-Q-b-v9zeCdsVsBbi3mY1wVGZZ4tKKJWm8EPOvDrD8EEB4Itd7~45LW5w__&Key-Pair-Id=KUT5TJCACFTXG","author","Oregon State Legislature","date","2025-02-07T00:00:00Z","article","Terrence Woods, Oregon’s State Chief Information Officer, and agency leads briefed the Joint Legislative Committee on Information Management and Technology on the state’s data center operations, enterprise information services (EIS) programs, cybersecurity services and new data-governance work.

James Foster, director of the State Data Center, said the facility — built in 2006 and later expanded — now supports 85 agencies, boards and commissions and provides colocation, managed computing, backup, enterprise storage, network and cloud-brokering services. He described the data center’s raised floor area, temperature and humidity controls, and a 2021 power-and-cooling expansion that enabled new colocation services and improved resiliency.

CIO Woods and Foster told the committee that shared, centralized services remain price-competitive compared with peer states. Foster cited a recent vendor study that found data center operating costs approximately 56% below a peer-group average, which the presenters quantified as roughly $42 million less in operating expenses compared with that peer average. Committee members asked whether agencies are required to use the state data center; Woods said there is no mandate, but agencies often choose colocation first and later transition to managed services because of demonstrated value.

Ben Gresgeir, the state chief information security officer, described the state’s cybersecurity services division (CSS). He said CSS is a unified enterprise capability of about 64 cybersecurity professionals covering governance and policy, enterprise network security, a security operations center (SOC), architecture and assessments. Gresgeir noted recent accomplishments including adoption of NIST guidance (presenters cited NIST SP 800-63 controls), migration to CIS v8 controls for agency assessments, procurement of a cyber threat-intelligence platform to support dark-web monitoring, and near-complete rollout of mobile device management (MDM) covering roughly 29,000 executive-branch mobile devices. He also described a cooperative threat-intelligence agreement that 34 counties have indicated interest in joining.

Jennifer De Jong, shared services director at EIS, reviewed enterprise programs including the Oregon.gov portal (e-government), Microsoft 365 support, telecommunications/telephony management and the Statewide Quality Assurance Program that enforces independent quality management for major IT projects per state administrative rules. De Jong said EIS is planning a replacement for an end-of-life SharePoint platform used on Oregon.gov and will add vendor choices for contact-center services.

Catherine Darnell Helms, the chief data officer, reported that the state has released an enterprise memorandum of understanding (MOU) for data sharing and that three agencies — Oregon Housing, the Oregon Health Authority and the Department of Human Services — are piloting a statewide data‑sharing MOU intended to shorten negotiation times for interagency data use. Helms also described the public Oregon Transparency website, the state’s ortho‑imagery program (airborne imagery hosted in AWS), and planned work to strengthen geospatial parcel data in partnership with county assessors.

Why it matters: lawmakers asked about coordination, mandatory controls and follow-through. Presenters said mandatory items in the state service catalog require completion, and EIS/CSS follow up with assessments, visits and technical assistance to ensure compliance. Committee members sought additional detail on timelines and funding for SharePoint migration, long‑term funding for recurring ortho imagery, and the scale of data center savings.

Ending: Presenters offered to return with project timelines, more precise cost details and, where required, closed‑session briefings on security‑sensitive programs.","mediaType","Video","parentTitle","Joint Committee On Information Management and Technology 02/07/2025","oneSentenceSummary","The state CIO’s continuation of an earlier overview described the State Data Center’s expansion, managed-service rates below peer averages, cybersecurity enterprise capabilities, and a new statewide data‑sharing memorandum of understanding piloted by three agencies.","taxTitle","Information Management and Technology, Joint, Committees, Legislative, Oregon","taxId",18221,"location","Oregon","headline","","shortSummary",{"_33":77,"_35":36,"_37":38,"_39":78,"_41":79,"_43":80,"_45":81,"_47":82,"_49":83,"_51":84,"_53":85,"_55":56,"_57":58,"_59":86,"_61":62,"_63":64,"_65":87,"_67":68,"_69":70,"_71":72,"_73":74,"_75":74},6343074,"Federal and state officials warn of nation-state cyber campaigns targeting water, communications and transport",199,239000,438000,"/Search/View?dp=1&key=2252894-57d6dd8017afb0686f72eece748728ef&start=239&end=438","https://assets.pipeline.soar.com/2252894-57d6dd8017afb0686f72eece748728ef/thumbnail_239000.jpg","/articles/6343074/Oregon/Federal-and-state-officials-warn-of-nation-state-cyber-campaigns-targeting-water-communications-and-transport","https://secure.pipeline.soar.com/6343074-a217e45f6bc8ea2b5279dbab4f43e9b2/orig.mp4?Expires=1770922572&Signature=OtS3mGGztPnWmcKoDd4p5S5tfbg~9ZBtw41JRu~ACMD5n7aalvgJ5-cc~vZVNtwveS8yqYJTn7cdreTOSOFy-O7c99xV2AOvcnHD7G6U8DH1~edciDqrlcWdykEaPwDAcsB4mlwANrlrHh3~J-GV07oy~~of0QRkaFgktEqMBTZPXLTthAtEulPMBPh-CectixZnaegs~2dplyKJ~8kLYmOHT729voCyrh0H9Rad4aJie3VQRrjwM1WMLJYipVwZoHk32matHaYG6nG3yzSK4SPBSnIeTi~kZBVvJZNnPrFkBl4RA6C~MLbnt-xJKK-0nvqGmKx3A8Iz9bAR3v-QvA__&Key-Pair-Id=KUT5TJCACFTXG","Leslie Kainoa, the Cybersecurity State Coordinator assigned to the Cybersecurity and Infrastructure Security Agency (CISA), told the Joint Legislative Committee on Information Management and Technology that nation-state actors are actively probing U.S. critical infrastructure and quietly positioning inside networks to enable future disruptive or destructive attacks.

The committee heard that China-linked groups are among the most active adversaries, and that attackers often “live off the land” by using legitimate credentials and routine network activity to avoid detection. Ben Gresgeir, Oregon’s state chief information security officer, told lawmakers that while China accounted for a substantial share of observed malicious traffic, “Russia and everybody else is also a big contributor,” and the state tracks multiple foreign and domestic threat groups.

The warning was accompanied by concrete offers of help. Kainoa said CISA provides no-cost vulnerability scans, technical assessments, tabletop exercises, training and other services to critical infrastructure organizations, and emphasized that those services are available regardless of an organization’s size. She urged water utilities, transportation operators and communications providers to use CISA scans to identify and remediate internet-facing vulnerabilities.

Why it matters: committee members pressed officials for specific local implications — such as manipulation of water-treatment chemical controls, loss of remote control of valves, or simultaneous disruptions of water, transportation and power — and were told those scenarios are plausible and could cause localized environmental damage or hinder emergency response. The discussion linked national threat reporting to local readiness needs and funding gaps.

CISA’s state coordinator described an attack lifecycle in which adversaries gain initial access, remain covert for long periods, gather data and pre-position for destructive actions if geopolitical events trigger escalation. Gresgeir said Oregon has run an outreach campaign for the water sector, including 12 webinars and site visits; the state previously cataloged roughly 3,000 separate water-sector entities and is encouraging those entities to apply for federal cybersecurity grants to remediate “low-hanging fruit.”

Committee members repeatedly asked whether the state has evidence of attacks on autonomous vehicles or attacks specifically linked to trade tensions; officials said public, releasable data on those narrow points was not currently available but that they would follow up. On the volume of attempted attacks, the state CISO said the scale is large and sensitive and offered to brief lawmakers in a closed session; he told the committee that automated systems intercept “millions” of events and that agency-level intercepts are far larger than anecdotal counts.

Lawmakers pressed for clearer, statewide communication and for funding to help small water districts, special districts and municipalities close security gaps. Gresgeir recommended continued education, assessments and follow-on funding, noting that education alone reveals many mitigation needs that require dollars to fix.

The presentations concluded with committee members asking CISA and the state cybersecurity office to provide updated messaging that frames threats as global and multi‑actor rather than singling out one country, a request that CISA’s presenter acknowledged and said she would incorporate.

Ending: Officials encouraged local systems operators to visit CISA.gov to request vulnerability scans and assessment services, and offered to follow up with committee members on specific, non-public details in a closed session.

","A CISA briefing to the Joint Legislative Committee on Information Management and Technology stressed that nation-state groups are probing and pre-positioning inside U.S. critical infrastructure networks; Oregon officials described outreach and no-cost services to help local providers harden systems.","actionData","errors"]

Article not found

State CIO presents data center, enterprise IT services and data‑sharing progress to committee

Federal and state officials warn of nation-state cyber campaigns targeting water, communications and transport