California has introduced an updated statewide cybersecurity framework aimed at strengthening government defenses against an increasingly complex digital threat landscape, with a particular focus on attacks driven by artificial intelligence.
Governor Gavin Newsom announced the launch of Cal-Secure 2.0 on Friday, describing it as the next phase of the state’s long-term effort to safeguard public services, sensitive information, and critical government infrastructure from evolving cyber risks.
Updated Roadmap Expands on 2021 Cybersecurity Plan
The new strategy builds upon California’s original statewide cybersecurity blueprint introduced in 2021, providing agencies with updated guidance to address today’s more advanced cyber threats.
State officials said the revised framework is designed to help departments responsible for essential services—including healthcare, transportation, emergency response, and public benefits—strengthen their digital defenses while maintaining reliable services for residents.
The roadmap also incorporates preparations for risks associated with emerging technologies, particularly the growing use of artificial intelligence by cybercriminals.
AI Creates New Challenges for Government Security
According to state officials, cyberattacks have become more frequent and increasingly sophisticated as malicious actors adopt AI-powered tools to launch scams, exploit system vulnerabilities, and target government networks.
Newsom said Californians expect both their personal information and the public services they depend on to remain secure, adding that the updated strategy is intended to ensure state agencies remain ahead of rapidly changing digital threats.
Officials believe the new framework will enable agencies to identify weaknesses more effectively, strengthen protections, and improve response times when security incidents occur.
Three Core Priorities Drive Cal-Secure 2.0
The revised cybersecurity strategy is built around three major objectives designed to improve California’s digital resilience.
The first focuses on expanding the state’s cybersecurity workforce by recruiting, developing, and retaining skilled professionals capable of responding to modern threats.
The second aims to improve collaboration among government agencies by encouraging faster information sharing, coordinated responses, and stronger partnerships across departments.
The final priority centers on modernizing government technology through investments in stronger security systems while preparing agencies for the opportunities and risks presented by emerging technologies such as artificial intelligence.
Flexible Framework Tailored to Individual Agencies
Unlike the original cybersecurity strategy, Cal-Secure 2.0 allows state agencies greater flexibility to prioritize risks specific to their operations while remaining aligned under a unified statewide framework.
California State Chief Information Officer and Department of Technology Director Chris Given said cyber threats continue to evolve, making it essential for government defenses to adapt just as quickly.
State Information Security Officer Vitaliy Panych added that the roadmap enables agencies to strengthen security over time while maintaining a coordinated statewide approach that also benefits critical infrastructure partners.
California Continues Push on Digital Privacy and AI Governance
The updated cybersecurity roadmap complements California’s broader efforts to strengthen digital privacy protections and promote responsible use of emerging technologies.
State leaders pointed to several recent initiatives, including laws requiring internet browsers to offer easier ways for users to opt out of third-party data sales, stronger consumer protections related to social media account management, and expanded transparency requirements for data brokers.
California has also launched the Delete Request and Opt-out Platform (DROP), giving residents a simpler way to prevent data brokers from selling their personal information.
Responsible AI Remains a Key Focus
Officials said California continues to position itself as a national leader in artificial intelligence governance through executive orders issued in recent years that establish standards for responsible AI adoption while protecting privacy and civil liberties.
The state has also continued efforts to limit unnecessary data collection and strengthen safeguards against potential privacy violations.
With Cal-Secure 2.0 now in place, California hopes to provide state agencies with a practical and adaptable roadmap capable of defending public services against the next generation of cyber threats while ensuring residents’ information remains protected.
