DIR Releases Cybersecurity Strategic Plan

The Department of Information Resources (DIR) has released their statewide cybersecurity strategic plan for 2024-2029, with goals prioritizing threat surface management, strengthening governance, education, resilience and workforce development.

According to the plan, Texas government entities are expected to develop risk-based vulnerability management programs and improve systems protection and threat identification.

The plan also calls for the Texas government to “elevate cybersecurity as an essential function of government,” in addition to developing rules and regulations surrounding AI and quantum computing.

DIR plans to partner with both public- and private-sector entities to improve education and training efforts through newer, more tailored training delivery methods and content.

To ensure the continuous operation of business-critical systems, DIR’s strategy includes the implementation of third-party risk management strategies and solutions.

Finally, in its efforts to develop more cybersecurity professionals in the state, DIR plans to expand efforts to partner with K-12 and higher education organizations to develop workforce training and internship opportunities. This includes expanding the regional security operations centers.

“While directed at the state level, this plan offers a foundation for strengthening any organization’s cybersecurity program,” said DIR Chief Information Security Officer Nancy Rainosek in the plan’s introduction.

“DIR and the Office of the Chief Information Security Officer are here to assist our customers and believe incorporating these goals will advance your cybersecurity initiatives,” the plan reads. “Cybersecurity is a team sport, and working together, we can create environments to withstand the cybersecurity challenges of today and tomorrow.”