Source: US State of California Governor 2
What you need to know: Governor Newsom launches Cal-Secure 2.0 — the state’s new cybersecurity roadmap.
SACRAMENTO – Updating California’s roadmap for protecting the state government from increasingly sophisticated cyber threats, Governor Gavin Newsom today announced the release of an updated strategy — known as Cal-Secure 2.0 — to protect the state against new online threats, including artificial intelligence (AI)-enabled cyberattacks.
Building on California’s first statewide cybersecurity strategy launched in 2021, Cal-Secure 2.0 gives state agencies practical tools and guidance to strengthen the systems Californians rely on every day — from benefits and healthcare to transportation and public safety. The updated plan also prepares the state for new threats driven by AI and other rapidly evolving technologies.
Californians expect their government to protect not only their personal information, but also the essential services they rely on every day. As cyber threats evolve, California is evolving with them. Our strategy helps ensure our state stays ahead of emerging risks while continuing to deliver secure, reliable public services.
Governor Gavin Newsom
Why this matters
Cyberattacks are becoming more frequent and more sophisticated. Criminals are increasingly using AI to create convincing scams, exploit security weaknesses, and target government and critical infrastructure systems.
This updated strategy gives state agencies a clear roadmap to identify their biggest cybersecurity vulnerabilities, strengthen protections, and respond faster when threats emerge.
What’s new
The updated strategy focuses on three priorities:
-
Building a stronger cybersecurity workforce by recruiting, training, and retaining skilled professionals across state government.
-
Improving coordination across government so agencies can share information, respond faster, and learn from one another.
-
Modernizing technology by investing in stronger security tools and preparing for emerging technologies, including artificial intelligence.
“Cyber threats don’t stand still, and neither can we,” said California State Chief Information Officer and California Department of Technology Director Chris Given. “Cal-Secure 2.0 gives state agencies practical guidance and tools to strengthen security, adapt to new threats, and better protect the services Californians depend on.”
Unlike the original strategy, this update gives agencies flexibility to focus on the risks that matter most to their operations while following a common statewide framework aligned with national cybersecurity standards.
“Our goal is simple: help every state entity understand its biggest risks, strengthen its defenses, and respond quickly when threats arise,” said California State Information Security Officer Vitaliy Panych. “This roadmap gives agencies the flexibility to improve over time while working together under a common statewide strategy for both the state and our partners in critical sectors.”
Read the updated strategy here.
Building on California’s leadership
California has been a leader in protecting data privacy and leveraging emerging technologies to strengthen government services. This has included:
-
Signing legislation requiring browsers to allow Californians to opt out of third-party sales of their data at one time instead of on each individual website; requiring social media companies to make canceling an account straightforward, clear, and comprehensive; providing consumers with more information about the personal information collected by data brokers and who may have access to consumers’ data.
-
Developing a new tool (the Delete Request and Opt-out Platform, better known as DROP) that enables Californians to easily opt out of the sale of their information by data brokers.
-
Signing nation-leading Executive Orders in 2023 and 2026 on responsible AI adoption and procurement that protect privacy and civil liberties.
-
Pushing back against the federal government’s privacy violations and adopting best practices to minimize data collection and maximize protections.