Oklahoma looks to the next 250 years during Cybersecurity Awareness Month

OKLAHOMA CITY – Gov. J. Kevin Stitt, in collaboration with the Office of Management and Enterprise Services, has declared October 2026 as Cybersecurity Awareness Month in Oklahoma, highlighting the shared responsibility individuals, organizations and government have in protecting personal information and the state’s digital infrastructure.

The governor’s proclamation aligns with the federal Cybersecurity and Infrastructure Security Agency’s (CISA) national theme, Securing the Next 250, in honor of America’s 250th anniversary and with the goal of protecting the nation and our state for another 250 years.

“As our country celebrates 250 years, we also have an opportunity to think about the digital foundation we are building for the future,” said State Chief Information Officer Dan Cronin. “The technology we rely on will continue to evolve, and so will the threats against it. Securing the next 250 years starts with the decisions we make today to strengthen our systems, protect our data and build a culture where cybersecurity is everyone’s responsibility.”

That responsibility is becoming increasingly important as cyber threats evolve faster and become more sophisticated. Emerging technology, including artificial intelligence, is accelerating the rate at which cybercriminals can identify and exploit vulnerabilities in software and systems.

OMES Oklahoma Cyber Command, the state’s central cybersecurity team, works around the clock to monitor, identify and respond to cyber threats while protecting state users, networks, data and applications. Its efforts are strengthened through the Oklahoma Information Sharing and Analysis Center (OK-ISAC), which brings together public- and private-sector partners to share threat information and best practices that improve cyber resilience across Oklahoma.

While strong systems and coordinated defenses are critical, individuals also play an important role in protecting themselves and their communities. CISA encourages everyone to take four core steps to reduce their risk online:

1. Use strong passwords and a password manager – create unique, complex passwords (or passphrases) for each account and use a password manager to securely generate and store them.
2. Turn on multifactor authentication (MFA) – add an extra layer of security beyond a password whenever MFA is available on personal and work-related accounts.
3. Recognize and report scams – be cautious of suspicious emails, messages and requests and report suspected phishing attempts or scams.
4. Update software and systems regularly – keep all devices and applications up to date so known security vulnerabilities can be addressed.

“The strongest cyber defenses are built before an incident ever occurs,” said State Chief Information Security Officer Daniel Langley, who leads the Oklahoma Cyber Command team. “Every strong password, software update and reported scam helps reduce risk. When Oklahomans make these practices part of their everyday routines, those individual actions add up to a more resilient state.”

To support this collective mission, Oklahoma businesses, government agencies and other organizations can become Oklahoma Champions by pledging to practice good cybersecurity habits. Champion organizations will be recognized on the OK-ISAC website for their dedication to keeping Oklahoma cyber secure. Organizations seeking more information on how to participate in Cybersecurity Awareness Month can email the OK-ISAC at okisac@omes.ok.gov.

Individuals and organizations are also encouraged to join OK-ISAC’s 31 Days of Cybersecurity challenge for a month full of easy ways to secure your devices, improve your knowledge of cyber threats and practice online safety. You can also visit CISA’s Cybersecurity Awareness Month webpage for more information, resources and guidance on securing your business, yourself and your family.

To report cyber incidents or suspicious activity to Oklahoma Cyber Command, state employees should submit a ticket through the OMES Service Desk. Non-state employees can report cyber incidents like theft of funds, identity theft and other fraud to the Federal Bureau of Investigation’s Internet Crime Complaint Center (IC3) and the Federal Trade Commission.

The Office of Management and Enterprise Services provides financial, property, purchasing, human resources and information technology services to all state agencies, and assists the Governor’s Office with budgetary policy matters. Our mission: Provide excellent service, expert guidance and continuous improvement in support of our partners’ goals. For more information, visit oklahoma.gov/omes.

Oklahoma Cyber Command is charged with protecting state users and their devices, networks, data and applications from malicious intent. The OMES Information Services division supports Oklahoma Cyber Command in its objectives. Oklahoma Cyber Command’s top priority is safeguarding the state’s data and computer infrastructure against unauthorized data use, disclosure, modification, damage and loss.

In response to increasing cyber threats to Oklahoma, the Oklahoma Information Sharing and Analysis Center (OK-ISAC) was established in August 2020 as a multiagency effort led by the Office of Management and Enterprise Services. Primarily aimed at mitigating cybersecurity risks across the state, this program offers real-time monitoring, vulnerability identification, incident response and threat intelligence to its members and partners. For more information, visit oklahoma.gov/okisac.

Christa Helfrey
christa.helfrey@omes.ok.gov