Public sector organizations typically use a federated model for cybersecurity, where each entity is responsible for its own critical applications. This approach limits a comprehensive statewide view of visibility and risk management, making it difficult for leaders to identify and prioritize efforts to mitigate risks effectively. As cyber events increasingly threaten public sector operations, there is a shift towards a whole-of-state model that enhances visibility and risk reduction across the entire state's infrastructure.

States are moving towards collective defenses, where public and private sectors collaborate to strengthen security resources and share information about common risks. Initiatives like the State and Local Cybersecurity Grant Program, which allocates $1 billion over four years, support the implementation of cybersecurity best practices. Additionally, programs like the Arizona Statewide Cyber Readiness Grant provide technical assistance and resources to help vulnerable areas improve their cybersecurity posture.

Government agencies often struggle with outdated regulations that hinder agile procurement, which is essential for fostering innovation and timely implementation of cybersecurity solutions. Delays in acquiring necessary resources can leave systems vulnerable for extended periods. Research indicates that using platforms like AWS Marketplace can save organizations up to 66% in procurement time, enabling quicker access to the tools needed to enhance defenses against cyber threats.