Current status of U.S. states cyber legislations or statutes according to state chief information security officers (CISOs) in 2024, by cybersecurity provision
Characteristic
Legislation/statute established and funded
Legislation/statute established and not funded
Legislation/statute in progress
Legislation/statute not in place
Role and authority of the enterprise CISO or equivalent
53%
6%
8%
33%
Cyberthreat information sharing program between state agencies, law enforcement, and private entities
35%
16%
4%
45%
Continuity of government/ continuity of operations
33%
20%
2%
45%
The chart is not accessible to screen readers. Please switch to the table view to access the data.
A 2024 survey of State Chief Information Security Officers in the United States found that 53 percent of states have established and funded legislation/statutes defining the role and authority of the enterprise Chief Information Security Officer (CISO) or equivalent, with 6 percent establishing but not funding such legislation and 8 percent having legislation in progress.
Profit from the additional features of your individual account
Currently, you are using a shared account. To use individual functions (e.g., mark statistics as favourites, set
statistic alerts) please log in with your personal account.
If you are an admin, please authenticate by logging in again.
Learn more about how ÌÇÐÄÆƽâ°æ can support your business.
Deloitte. (September 30, 2024). Current status of U.S. states cyber legislations or statutes according to state chief information security officers (CISOs) in 2024, by cybersecurity provision [Graph]. In ÌÇÐÄÆƽâ°æ. Retrieved July 20, 2026, from /statistics/1455151/us-status-of-cybersecurity-legislations/
Deloitte. "Current status of U.S. states cyber legislations or statutes according to state chief information security officers (CISOs) in 2024, by cybersecurity provision." Chart. September 30, 2024. ÌÇÐÄÆƽâ°æ. Accessed July 20, 2026. /statistics/1455151/us-status-of-cybersecurity-legislations/
Deloitte. (2024). Current status of U.S. states cyber legislations or statutes according to state chief information security officers (CISOs) in 2024, by cybersecurity provision. ÌÇÐÄÆƽâ°æ. ÌÇÐÄÆƽâ°æ Inc.. Accessed: July 20, 2026. /statistics/1455151/us-status-of-cybersecurity-legislations/
Deloitte. "Current Status of U.S. States Cyber Legislations or Statutes According to State Chief Information Security Officers (Cisos) in 2024, by Cybersecurity Provision." ÌÇÐÄÆƽâ°æ, ÌÇÐÄÆƽâ°æ Inc., 30 Sep 2024, /statistics/1455151/us-status-of-cybersecurity-legislations/
Deloitte, Current status of U.S. states cyber legislations or statutes according to state chief information security officers (CISOs) in 2024, by cybersecurity provision ÌÇÐÄÆƽâ°æ, /statistics/1455151/us-status-of-cybersecurity-legislations/ (last visited July 20, 2026)
Current status of U.S. states cyber legislations or statutes according to state chief information security officers (CISOs) in 2024, by cybersecurity provision [Graph], Deloitte, September 30, 2024. [Online]. Available: /statistics/1455151/us-status-of-cybersecurity-legislations/
