Overtaxed State CISOs Struggle With Budgeting, Staffing

A Deloitte/NASCIO biennial report finds US state CISOs are taking on more responsibilities—particularly data privacy, risk management, incident response, and operations—while cybersecurity budgets and staffing remain insufficient, with many states allocating a small fraction of IT spend to security and struggling with talent shortages; physical security responsibilities have declined, and collaborative approaches such as Texas’ regional SOC with universities are emerging to mitigate resource gaps.