The mood in the meeting room at the Homeland Security Departments CIO of-
fice was tense already when Bob West made his proposal.It was midday on a Wednesday in early
spring last year, and the departments
CIOs had gathered in the nondescript
federal building near LEnfant Plaza in
Washington for their weekly review of
DHS most pressing technology issuesa
regular meeting that routinely called
forth strong opinions.
West, the departments chief information
security officer, was proposing to send
an IT security evaluation teamwhat the
CISO office called a boarding partyinto
one of DHS big six agencies, the headline
organizations that field thousands of
technology users and hundreds of systems.
The idea wasnt going over well with
the CIOs in the roomexcept for one.
West's group already had conducted a security
evaluation at one DHS agency, finding,
among other things, that the agency
had a poor grasp of its own systems. The
CIOs at the meeting, who had pushed back
at Wests IT security evaluations from the
beginning, vocally condemned the proposal
for a second boarding.
Recalling the meeting, West said, I didnt
say anything, which is unusual for me.
But in a moment that suggested a sign
of hope for West, and DHS, the CIO of
that first agency reviewed by the boarding
party spoke up to defend and recommend
the security evaluation.
The CIO said the boarding party
process was one of the most empowering
things that ever happened to me as a
CIO. Now, [IT professionals in the
agency] are coming to me with their
problems, West recounted.
Charles Church, now CIO of DHS Preparedness
Directorate, who attended
that meeting, recalled that moment and
its deeper impact: It allowed the CIO to
reassert control. As a CIO, IT security is
one of my two clubs. Procurement control
is my other club.