California launches next phase of state cybersecurity plan as AI changes threat landscape – California State Portal | CA.gov

California officials announced the rollout of the next phase of the state’s cybersecurity strategy, emphasizing how artificial intelligence is reshaping both defensive capabilities and the tactics used by threat actors. The update builds on the 2022 Cybersecurity Maturity Model and introduces new tools, training programs, and inter‑agency coordination aimed at protecting critical infrastructure and public services.

What You Need to Know

The initiative, called “California Cyber Secure 2025,” allocates $185 million over three years to upgrade network monitoring, expand AI‑driven threat detection, and harden state‑run systems against ransomware and supply‑chain attacks. Funding is split between the Department of Technology, the California Cybersecurity Integration Center (Cal-CSIC), and the Office of Emergency Services.

Key components include the deployment of machine‑learning models that analyze log data in real time to flag anomalous behavior, a statewide credential‑management platform that enforces multi‑factor authentication for all employee accounts, and a series of quarterly tabletop exercises that simulate AI‑generated phishing campaigns targeting state employees.

Why It Matters

State agencies manage vast amounts of personal data, from driver‑license records to health‑information exchanges, making them attractive targets for financially motivated and nation‑state adversaries. By integrating AI into defensive operations, California aims to reduce the average detection time from days to minutes, limiting the window for attackers to exfiltrate data or disrupt services.

Improved cybersecurity also supports the state’s broader digital‑government goals, such as expanding online services for residents and ensuring the reliability of emergency‑response networks. A stronger security posture helps maintain public trust and avoids costly remediation efforts that can exceed tens of millions of dollars per incident.

Key Details

• $185 million budget: $70 million for AI‑enhanced monitoring, $50 million for identity‑and‑access management, $40 million for workforce training, $25 million for incident‑response readiness.
• AI threat‑detection pilots launching in Q1 2025 at the Department of Motor Vehicles and the California Health and Human Services Agency.
• Mandatory MFA rollout to cover 100 % of state employee accounts by the end of 2025.
• Annual cybersecurity workforce expansion target: 1,200 new certified analysts across state agencies by 2027.
• Joint information‑sharing platform with local governments and utilities to begin data exchange in mid‑2025.

What’s Next

Over the next six months, the Cal-CSIC will finalize contracts with vendors for AI analytics tools, begin the first round of employee phishing simulations, and publish a public dashboard showing key metrics such as mean‑time‑to‑detect and mean‑time‑to‑respond. Legislative oversight committees will review progress reports quarterly to ensure funds are used as outlined and to adjust priorities as the threat environment evolves.

📌 Source: Google News Ai