NCN Frequently Asked Questions (FAQ)

The NOC cyber security subcommittee developed a job description and is linked here. Cybersecurity Coordinator Job Description

The position will be hired by ESUCC. Oversight of this position will come from the administrators of the NCN, with an indirect oversight coming from the technology directors of the member ESUs. Official orders come from the administrators, which will be generic in nature. Specifics will come from the member technology directors as they familiar with the intricacies of environments.

Since this will likely be a single FTE, the ability to have this individual available 24/7/365 is unreasonable. But the FTE should be able to assist local and ESU efforts for incident remediation and analysis which will likely include off hours when feasible.

The DHS cybersecurity grant could be used to cover costs partially, since it is a matching grant. However, if there are no grant monies awarded to the NCN project, the FTE would be funded by other means, including, but not limited to member ESU fees.

Security posture involved more than just vulnerability scanning. It also includes proper planning, policies and procedures. The NOC Cybersecurity Committee Cybersecurity Readiness Rubric will be a tool used, but this rubric will need to be expanded upon. The DHS Cyber Hygiene scans are also a great tool to be used, but that report too will also need to be expanded upon. This may include internal scanning and other recommendations.