State Cybersecurity Governance Cross Site Report

This report and supporting case studies identify how five states, identified by the Department of Homeland Security (DHS) and the National Association of State Chief Information Officers (NASCIO), govern cybersecurity as an enterprise-wide, strategic issue across state government and other public and private sector stakeholders in six key areas – 1) Strategy and Planning, 2) Budget and acquisition, 3) Risk identification and mitigation, 4) Incident response, 5) Information sharing, and 6) Workforce and education.