California Cybersecurity Task Force

Note: For SLCGP information, please go to the CyberSecurity Investment Planning Subcommittee (CIPS) section below.

Mission

The California Cybersecurity Task Force is an advisory body to the State of California Senior Administration Officials in matters related to Cybersecurity.

History and Mandate

From its creation in 2013 until approximately 2018, Cal OES had built the California Cybersecurity Task Force (CCTF) to be the preeminent cybersecurity advisory body for California. After the Cal-CSIC stood up in 2018, it took on the responsibility of running the CCTF. It is composed of seven subcommittees focused on goals and objectives aligned to state cybersecurity objectives. The subcommittees are comprised of subject matter experts and executive representatives from Federal, State, local, and tribal government, private industry, academia, and law enforcement in California.

In accordance with Section 8586.5 of the Government Code:

“The Office of Emergency Services shall establish and lead the California Cybersecurity Integration Center. The California Cybersecurity Integration Center’s primary mission is to reduce the likelihood and severity of cyber incidents that could damage California’s economy, its critical infrastructure, or public and private sector computer networks in our state. The California Cybersecurity Integration Center shall serve as the central organizing hub of state government’s cybersecurity activities and coordinate information sharing with local, state, and federal agencies, tribal governments, utilities and other service providers, academic institutions, and nongovernmental organizations.”

Furthermore:

“The California Cybersecurity Integration Center shall develop a statewide cybersecurity strategy, informed by recommendations from the California Task Force on Cybersecurity and in accordance with state and federal requirements, standards, and best practices. The cybersecurity strategy shall be developed to improve how cyber threats are identified, understood, and shared to reduce threats to California government, businesses, and consumers. The strategy shall also strengthen cyber emergency preparedness and response, standardize implementation of data protection measures, enhance digital forensics and cyber investigative capabilities, deepen expertise among California’s workforce of cybersecurity professionals, and expand cybersecurity awareness and public education.”

How You Can Participate

The CCTF is open to cybersecurity professionals from across the state who are committed to improving cybersecurity in California. It is composed of subject matter experts and executive representatives from Federal, State, local, and tribal government, private industry (particularly utilities and service providers), academia, non-governmental organizations, and law enforcement in California. All CCTF members have a vested interest in cybersecurity and their involvement and commitment will benefit California and its citizens. As a voluntary organization, you can participate as much or as little as you have time for. By taking an active role in the CCTF you will find opportunity to help shape major cybersecurity initiatives, network with colleagues, share your insights, bring best practices back to your organizations, and learn more about what the Cal-CSIC and its partners are doing to build security in cyberspace. If you are interested in joining, please use the contact information below.

Subcommittees

Task Force subcommittees have been formed based on strategic goals and vital areas of opportunity. There are seven subcommittees within the Task Force each focused on a specific strategic goal.

Workforce Development & Education Subcommittee (WDES)

  • Recommend alignment and refinement of the cybersecurity educational pathways inclusive of curricula, competitions, and professional development activities at the high school level of education and higher. There will be focus on ensuring veterans and the underrepresented in the field of cybersecurity are included and are afforded opportunities.
  • Subcommittee Chair: Dr. Keith Clement, CSU Fresno

Cyber Risk Management Subcommittee (CRMS)

  • Enhance California’s ability to detect, protect against, mitigate, respond to, and recover from significant cyber incidents.
  • Build public and private partnerships to support and ensure relationships that establish and guarantee the success of the subcommittee.
  • Advise on best practices to identify, mitigate, and govern cyber risk across the State.

Critical Infrastructure Subcommittee (CIS)

  • Provide recommendations for cybersecurity protection, prevention, detection, and response for critical infrastructure in the State.
  • Critical Infrastructure is defined by FEMA and Cal OES, but the Critical Infrastructure Subcommittee should take an active role in helping refine those definitions including risk assessment methodologies.
  • Provide a forum for advising the Cal-CSIC on critical infrastructure issues related to state and federal legislation and regulatory frameworks/proposals, and to facilitate outreach required by these statutes and regulations

Information Sharing Subcommittee (ISS)

  • Develop information sharing agreements and best practices, for the purposes of enhancing threat detection, providing early warnings of cyberattacks, and assessing risk to the State.
  • Exercise cyber information sharing capabilities annually and encourage responsible cyber threat information sharing and reporting.

High Tech & Digital Forensics Subcommittee (HTDFS)

  • Advise and assist with a framework for developing a digital evidence training program and State law and non-law enforcement readiness to respond to cybersecurity incidents.
  • Establish law enforcement mutual aid agreements for the acquisition and preservation of digital evidence in conjunction with the California Highway Patrol and the FBI’s Cyber Task Force.

Economic Development Subcommittee (EDS)

  • Advise on ways to expand research and innovation in cybersecurity industries in California.
  • Advise on ways to expand California’s cybersecurity assets to attract additional investment into the state.

Cybersecurity Investment Planning Subcommittee (CIPS)

  • Will directly advise and assist in development of the state cybersecurity strategy
  • Will advise on cybersecurity grant programs available in California in coordination with other relevant subcommittees, and facilitate information sharing with potential grant recipients
  • In 2022 the Cal-CSIC formed the seventh subcommittee of the CCTF called the Cybersecurity Investment Planning Subcommittee to serve as the “planning committee” required by the State and Local Cybersecurity Grant Program (SLCGP). SLCGP is a component of the 2021 federal Infrastructure Investment and Jobs Act (IIJA) also known as the Bipartisan Infrastructure Law.
  • CCTF-CIPS is limited to all potential grant recipients (state and local governments, special districts, school districts, tribal governments, etc. as defined in SLCGP) and their designated representatives.
  • In 2023, the CCTF-CIPS overseen by the Cal-CSIC produced the first-year SLCGP Cybersecurity Plan, which is posted here: California’s SLCGP Cybersecurity Plan v1.5.5 (September, 2023)
  • To apply for SLCGP funds as a subrecipient, please go to the Cal OES Grants Management SLCGP page

Contact

CCTF Questions, To Join, Or To Be Added To Contact List:

Cybersecurity Investment Planning Subcommittee & SLCGP: