U.S. states with formally established CISO authority 2018, by mechanism
In 2018, 63 percent of U.S. state chief information security officers (CISOs) had their authority established by statute or law, which was the most common scenario for the CISO or equivalent position. Only two percent of state CISOs had no formally established authority.