ISSO Mentorship Program: Mentor Guide

Introduction

This guide is for mentor participants of the ISSO Mentorship Program at the Centers for Medicare & Medicaid Services (CMS). The program seeks to improve the overall readiness and skill of Information System Security Officers (ISSOs) by creating opportunities for knowledge sharing and support among ISSOs of all experience levels. 

Learn more about the CMS ISSO Mentorship Program and how it works.

Welcome for mentors

Thank you for volunteering as a mentor. Your experience and willingness to support others plays a crucial role in developing the next generation of capable and confident ISSOs at CMS — thereby increasing the security posture of CMS systems and data. This guide provides expectations and best practices to help you succeed as a volunteer mentor along the ISSO mentorship pathway.

Expectations for mentors

As a mentor, you are expected to:

Help your mentee in practical ways

• Commit to meeting regularly (weekly, bi-weekly or monthly, based on mentee needs and your availability)
• Assist your mentee in identifying skill gaps and setting goals
• Be responsive to ad-hoc questions and concerns from your mentee

Serve as a trusted guide

• Encourage independent learning (including the use of CMS available resources) and critical thinking
• Maintain a confidential, safe, and professional learning environment

Contribute to program metrics

• Complete an automated form for each mentorship meeting, which monitors progress and collects metrics.
• Complete occasional feedback surveys to gauge mentor satisfaction and overall program effectiveness.

Tips for mentors

You will be most successful as a mentor in the program if you:

• Teach by example. Remember the mentee will take their cues from your actions (not only your words). Model the behaviors and work ethics that will help them succeed.
• Share about failures as well as successes. You as a mentor are not expected to be perfect. Sharing lessons learned from past failures will help your mentee avoid similar mistakes.
• Use helpful frameworks. While ad hoc conversations can be beneficial, your mentee might benefit from the use of structured frameworks such as SMART goals and SWOT analysis.
• Share experiences instead of dictating actions. You can explain how you handled a similar situation or make suggestions based on past lessons learned – but try to let the mentee come to their own conclusions.
• Be honest. Don’t be afraid to challenge your mentee if their ideas or actions are headed off-course. Be kind but direct with your feedback so they can improve and hold themselves accountable to their goals.

Recommended resources and training

You can connect your mentee with resources and training specific to their needs and goals. For anyone participating in the ISSO Mentorship Program, it’s important to have quick access to ISSO resources provided by CMS and other organizations. 

The CMS Information Systems Security Officer (ISSO) Handbook is the authoritative guide for everything a CMS ISSO needs. It provides useful information like:

• Tips for getting started - Everything a new ISSO needs for onboarding at CMS, including self-assessment, initial meetings, and goals for the first year.
• Role and responsibilities - Learn what’s expected of an ISSO at CMS, and how to perform all required duties.
• ISSO documents, tools, and resources - Policies and other resources from CMS and federal security organizations that are integral to the ISSO’s work.
• ISSO community and events - Opportunities for engagement, collaboration, and learning with other CMS security professionals.
• Training opportunities - Browse free training offerings from CMS to help ISSOs of all skill levels advance their knowledge and grow in their careers.

Need help?

Ask questions or get help anytime from the ISSO Support Team: ISSO@cms.hhs.gov. You can also ask questions in #cms-isso in CMS Slack.