Oklahoma recognizes October as Cybersecurity Awareness Month

OKLAHOMA CITY – Oklahoma Gov. J. Kevin Stitt, in collaboration with OMES Oklahoma Cyber Command and the Oklahoma Information Sharing and Analysis Center (OK-ISAC), has declared October 2024 as Cybersecurity Awareness Month in the State of Oklahoma. By participating in the 21st-annual National Cybersecurity Month campaign, the state seeks to emphasize the critical role that every Oklahoman plays in safeguarding personal data and ensuring the security of our state’s digital infrastructure.

Oklahoma’s proactive approach to cybersecurity is highlighted by OMES Oklahoma Cyber Command, which works around the clock to monitor, identify and respond to cyber threats. This team protects state data and applications from tens of billions of threats annually, including millions of phishing attacks and advanced persistent threats.

“Oklahoma is proud to be at the forefront of cybersecurity, with one of the most advanced cyber teams in the nation,” State Chief Information Security Officer Michael Toland said. “Protecting our citizens’ sensitive information is a top priority, and during Cybersecurity Awareness Month, we remind all Oklahomans to take simple but essential steps to safeguard their personal data and contribute to our state's security.”

Cyber Command works hand in hand with OK-ISAC, a membership program overseen by OMES that fosters collaboration between public and private sectors to share vital information and best practices to improve cyber resilience at local, regional and national levels.

As cybersecurity incidents continue to rise globally, including the recent CrowdStrike outage that underscored the importance of quick and agile responses to threats, Oklahoma remains steadfast in its commitment to protecting its citizens. The state is urging individuals, businesses and agencies to join the Secure Our World campaign, a national initiative launched by the federal Cybersecurity and Infrastructure Security Agency (CISA) in 2023.

The Secure Our World campaign promotes four key actions that anyone can take to significantly reduce online risks:

1. Create strong passwords or passphrases – Utilize a password manager like Secret Server, the state’s recommended tool, to generate and store robust passwords.
2. Employ multifactor authentication (MFA) – Add an extra layer of security by ensuring MFA is enabled on both personal and work-related accounts.
3. Update software and systems regularly – Keep all devices and applications up to date to protect against vulnerabilities.
4. Identify and report phishing attempts – Be vigilant against suspicious emails and use tools like the Phish Alert Report button in Outlook to report potential scams.

“Cybersecurity is not just a government responsibility – it’s a community effort,” said Joe McIntosh, Oklahoma’s state chief information officer. “Everyone has a part to play in keeping themselves, their families and our state safe online. Together, we can ensure a more secure digital environment.”

To support this collective mission, Oklahoma businesses, government agencies and other organizations are encouraged to become Oklahoma Champions by pledging to practice good cybersecurity habits. Champion organizations will be recognized on the OK-ISAC website for their dedication to keeping Oklahoma cyber secure. Organizations seeking more information on how to participate in Cybersecurity Awareness Month can email the OK-ISAC at okisac@omes.ok.gov.

Individuals are encouraged to join the Secure Our World initiative to enhance cyber safety practices at home and at work. Visit cisa.gov/secure-our-world for resources like the Cybersecurity Awareness Month 2024 toolkit and guidance on securing yourself and your family, your business and more.

To report cyber incidents or suspicious activity to OMES Oklahoma Cyber Command, state employees should submit a ticket through the OMES Service Desk. Non-state employees can report cyber incidents like stolen finances, identity theft and other fraud to the Federal Bureau of Investigation’s Internet Crime Complaint Center (IC3) and the Federal Trade Commission.

The Office of Management and Enterprise Services provides financial, property, purchasing, human resources and information technology services to all state agencies, and assists the Governor’s Office on budgetary policy matters. Our vision: Provide excellent service, expert guidance and continuous improvement in support of our partners’ goals. For more information, visit oklahoma.gov/omes.

Oklahoma Cyber Command is charged with protecting state users and their devices, networks, data and applications from malicious intent. The OMES Information Services division supports Cyber Command in their objectives. Oklahoma Cyber Command’s top priority is safeguarding the state’s data and computer infrastructure against unauthorized data use, disclosure, modification, damage and loss.

In response to increasing cyber threats to Oklahoma, the Oklahoma Information Sharing and Analysis Center (OK-ISAC) was established in August 2020 as a multiagency effort led by the Office of Management and Enterprise Services (OMES). Primarily aimed at mitigating cybersecurity risks across the state, this program offers real-time monitoring, vulnerability identification, incident response and threat intelligence to its members and partners.

Christa Helfrey
christa.helfrey@omes.ok.gov