Anatomy of a State Cybersecurity Audit

Where: California

How many agencies had data security flaws? “high risk deficiencies” at 21 state agencies

What regulatory action was called for?

•  comprehensive information security assessment at least every 3 years
• prompt resolution by agencies of security issues

KCRA | Report finds California government IT security flaws