Security is one of the topics covered in CDT's annual report, published at the end of 2018. The department's leadership, state CIO Amy Tong and Deputy CIO Chris Cruz, address the topic in the report's introduction:
"The deliberate theft of California’s sensitive information is illegal and intolerable," they write. "Building a robust cybersecurity infrastructure is one of the state’s top initiatives as it works to stiff-arm cyber criminals before they can snatch the data of Californians and wreak havoc on government and commercial information assets. Whether it is bolstering email security or securing the cloud computing environment, California is leading the charge for cybersecurity."
The Security Operations Center (SOC) was launched within CDT's Office of Information Security (OIS) at the beginning of fiscal year 2017. Here are the department's security priorities:
— Protect California’s information assets and maximize data access.
— Develop a robust and collaborative security risk reduction strategy.
— Develop an enterprise approach to security leadership and governance.
— Improve and invest in security capabilities to protect mission-critical systems and data.
— Foster a security-minded culture throughout California’s workforce.
