Report by Deloitte
2026 NASCIO-Deloitte Cybersecurity Study
Key Findings
63% of CISOs describe themselves as not very confident in the ability of local government and public higher education to secure public data, up from 35% in 2022.
Roughly one-fifth of CISOs indicate their states are moving toward a "whole-of-state" approach to cybersecurity.
49% of state CISOs name implementing effectiveness metrics as a top cybersecurity initiative, up from 25% in 2024 and 15% in 2022.
Only 26% of state CISOs are extremely or very confident that their state's information assets are protected from cyber threats, down from 48% in 2022.
94% of state CISOs are involved in developing Generative AI security policies.
84% of state CISOs are involved in Generative AI strategy development.
16% of state CISOs report their budgets have been cut, up from none in 2024.