A recent survey of state chief information and security officers reveals that while they are better prepared to defend against cyberattacks compared to four years ago, they still face challenges due to limited resources and staff. The Deloitte-NASCIO Cybersecurity Study, which included officials from all 50 states and D.C., highlighted concerns about budget constraints, lack of expertise, and staffing issues.
According to Srini Subramanian, principal of Deloitte & Touche LLP, the attack surface is expanding as government reliance on information technology grows, making it increasingly difficult for CISOs to protect against cyber threats. The biennial cybersecurity report identified new threats stemming from the use of servers, Internet of Things, and AI, creating more opportunities for attacks.
Despite the growing importance of the role of state chief information and security officers, many CISOs feel under-resourced and overwhelmed by the evolving cybersecurity landscape. The report noted that some states have introduced legislation to empower CISOs, but more needs to be done to address funding and talent shortages.
While CISOs are leveraging AI to enhance security operations, they also recognize the risks associated with generative AI. The report highlighted the need for CISOs to navigate budget constraints, talent shortages, and aging technology systems while addressing new cybersecurity threats.
To overcome these challenges, tech departments are encouraged to collaborate with government partners, explore creative funding solutions, diversify talent pipelines, engage in AI policy discussions, and promote the role of CISOs in digital transformation efforts.