It’s time to update your Cybersecurity Internal Controls
Department leadership and managers are responsible for establishing a “tone from the top” and assigning appropriate staff to ensure that cybersecurity internal controls are developed, tested, updated and that all staff are routinely trained to prevent operational disruption and data or financial losses due to a cyber incident.
Our CTR Cybersecurity Responsibilities page walks you step-by-step through key internal controls for your organization, including tools to assist with development, self-assessment, cyber awareness training, and incident response.
Cybersecurity internal controls require collaboration across your organization including Information Technology, Human Resources, Legal, all your business teams, and any contractor or third party supporting operations.
See our Cyber Awareness Training page for Free Cybersecurity Awareness Training for Employees. CTR has recently added two short training videos that can be used for new hires and refreshers in addition to any mandatory training your department is required to offer.
Please contact [email protected] with any incidents or suspected incidents of fraud or cyber threats or if you need support from our Statewide Risk Management Team.