State CIO Increases Fight against Spam, Security on California State E-mail Systems
State Technology Update - August 7, 2008
An estimated 10 to 15 million e-mail messages are sent to state agencies every day, 95 percent of which are spam or unsolicited email. To combat this problem, State Chief Information Officer Teri Takai is aggressively working with state information technology leaders to improve the security of California’s e-mail systems. At her request, an “E-Hub Design” Workshop was held in July for state agencies to modernize and collaborate on a statewide design solution focused on spam, virus protection and reducing the e-mail load on the state’s networks.
“Although the state has done a sufficient job at protecting against spam and e-mail viruses, we need to be more effective with our resources and take strong measures to develop consistency and maximize security throughout all of our departments,” said Teri Takai, State Chief Information Officer. “The E-Hub Design Workshop was an effective way to bring together department stakeholders and work on a design solution that will update our approach to better safeguard the state’s e-mail systems.”
The E-Hub Design Workshop included eight state agencies working on technical plans to secure and protect the state’s inbound, outbound, and inter-departmental e-mail systems by implementing Simple Mail Transport Protocol (SMTP) gateways for e-mail filtering, including anti-spam, anti-virus and secure e-mail routing services.
Led by Dale Jablonsky, an expert in enterprise architecture and the Agency Information Officer for the California Labor and Workforce Development Agency, the E-Hub Design Workshop was held on July 22 through 24.
When implemented, the E-Hub will:
- Improve security and protection of the state's critical e-mail services;
- Reduce network load as e-mail filtering is performed at the enterprise network border;
- Implement consistent e-mail filtering services and technologies; and
- Establish a central point of administration.
The California state government has a large, complex messaging environment with an estimated 200,000 total e-mail boxes. Approximately 150,000 of these e-mail boxes are within the Executive Branch. There are roughly 750,000 valid in-bound and out-bound e-mail messages and 300,000 inter-departmental e-mail messages sent and received each day.
With the volume and potential impact of Internet threats consistently increasing and recognizing that email is one of the most common targets for intrusion attacks, the state’s email systems must balance the need for strong security controls with the business requirements of state government.
The Workshop will reconvene in September for participants to finalize recommendations for a system design and complete a timeline for statewide implementation.