This year proved to be a busy one for state technology leaders. But across state lines, a handful of big stories took center stage in 2024.<\/p>\n\n\n\n
Each state contended with a variety of issues created by evolving technology, natural disasters, cyber threats and digital inequality this year. But, in addressing these common challenges, common opportunities emerged for innovation, resulting in several themes that transcended differences among the states, their tech operations and political party lines.\u00a0<\/p>\n\n\n\n
Here\u2019s a closer look at the five biggest IT stories that defined 2024 for state governments.<\/p>\n\n\n\n
The biggest IT story across many states in 2024 was the exploration and deployment of generative AI, which kicked into high gear this year. Many state governors in 2023 took regulatory actions such as issuing executive orders on the tech or creating working groups or task forces to lead AI policy creation, and the trend continued this year. State policymakers introduced nearly 700 pieces of AI legislation<\/a> in 2024, and even more are predicted for 2025.<\/p>\n\n\n\n So far, more than 30 states have formed a task force to advise on AI<\/a>, an advisory council or an alliance among public and private sector partners to ready states, their agencies and legislative bodies to take advantage of and manage the technology. And those groups began work this year. For example, Texas\u2019s Artificial Intelligence Advisory Council,<\/a> according to Chief Information Officer Amanda Crawford, has met five times in 2024 and is slated to release a report detailing new guidelines and recommendations for state lawmakers soon.<\/p>\n\n\n\n Once-theorized use cases<\/a> for generative AI also became a reality in many states this year. Pennsylvania<\/a> made waves in January becoming the first state to announce it had bought ChatGPT licenses from AI company OpenAI for members of its Office of Administration to participate in a pilot of the technology, signaling an embrace of AI in government operations. Unemployment offices like New Jersey\u2019s also began deploying the tech to assist with translation for non-English speaking residents<\/a>.<\/p>\n\n\n\n While many states made great strides to get ahead of the AI curve this year, they often came with leeriness. Some state officials described the process of incorporating generative AI into state operations as \u201cbuilding a plane in flight<\/a>,\u201d citing challenges like training their workforces<\/a> to understand how to use the new capabilities and tools. Some of these headwinds \u2014 in addition to some states contending with unclear governance and ethical frameworks, the lack of technology infrastructure, and funding \u2014 were the fodder for a September survey<\/a> by Ernst & Young that showed state and local government agencies lagging behind the federal government on AI adoption.<\/p>\n\n\n\n But beyond a natural skepticism of the newer technology, the capabilities and possibilities presented by generative AI are exciting<\/a> state government leaders and employees<\/a> alike. However, state leaders made it clear adoption needed to be done in lockstep with strong governance, guidelines and leadership around the technology.\u00a0<\/p>\n\n\n\n In the process of expanding and exploring AI uses this year, many state governments discovered they needed better data quality and governance, a trend that became the year\u2019s second biggest story.\u00a0<\/p>\n\n\n\n While the role of the chief data officer<\/a> has become a fixture in state IT leadership in recent years, duties of the CDO \u2014 which include improving a state\u2019s data infrastructure and facilitating data sharing \u2014 this year grew to include preparing data for AI consumption. And with a survey<\/a> published by NASCIO and EY in September finding that only 22% of states operate data quality programs, the urgency<\/a> to improve state data governance increased exponentially.\u00a0<\/p>\n\n\n\n \u201cOne thing all states can tell you is that our data is probably not in the best shape,\u201d Georgia CIO Shawnzia Thomas<\/a> said in October. \u201cRight now, we\u2019re trying to make sure we get all our agencies to delete all the data that you don\u2019t need.\u201d<\/p>\n\n\n\n In California, Chief Data Officer Jason Lally<\/a> said a good first step in tackling statewide data projects is for each agency to agree on definitions, including \u201cdata collection,\u201d \u201cprivacy\u201d and \u201csecurity.\u201d Many states this year began exploring data literacy programs<\/a> to inspire change in the culture of day-to-day government work to be more data-friendly. But Indiana Chief Data Officer Josh Martin<\/a> said in March this can be as challenging as any other business culture shift.<\/p>\n\n\n\n Another step agencies must take is bridging the state data silos, but in some cases, this requires the state to take a more measured approach. Outgoing North Carolina CIO Jim Weaver said in October that resolving his state\u2019s data issues<\/a> ahead of widespread generative AI adoption needed to be \u201csegment by segment, set by set,\u201d instead of attempting to tackle the entire problem at once.<\/p>\n\n\n\n While state and local governments suffered their fair share of cyberattacks in 2024, the cybersecurity of critical infrastructure received a new level of attention and scrutiny, becoming the third biggest state IT story for the year.\u00a0<\/p>\n\n\n\n Cyberattacks on critical infrastructure<\/a> \u2014 the collection of 16 sectors like energy, communications, information technology, transportation and water utilities that serve as the backbone for daily life \u2014 are known to have cascading effects on national security, public health and safety. Earlier this year, a report<\/a> published by the cybersecurity firm KnowBe4 called cyberattacks on power grids, communication systems, transportation networks, ports and other infrastructure \u201cthe new geopolitical weapon,\u201d and a rising threat to state governments.\u00a0<\/p>\n\n\n\n A November memo<\/a> from the Environmental Protection Agency\u2019s Office of Inspector General found that of the 1,000 public drinking water systems serving 193 million people that the office scanned for cyber vulnerabilities, 97 had critical- or high-risk vulnerabilities. Another 211 water utilities had \u201cmedium\u201d or \u201clow\u201d risk security vulnerabilities, such as \u201cexternally visible open portals.\u201d<\/p>\n\n\n\n \u201cThis critical infrastructure sector faces various threats from cyberattack, theft, vandalism, and other risks that can affect public health and leave communities vulnerable to the loss of clean water. This challenge is not hypothetical,\u201d Nicolas Evans, the office\u2019s acting assistant inspector general, said in his Nov. 13 memo<\/a>. \u201cRecent high-profile incidents at water systems have demonstrated the urgency needed to address cybersecurity weaknesses and vulnerabilities to physical attacks.\u201d<\/p>\n\n\n\n Many state, local, tribal, and territorial governments are the first line of defense against cybercriminals seeking to disrupt the operations of critical infrastructure, but they\u2019re often short on cybersecurity funds. To address these challenges, the Cyber Infrastructure and Security Agency and the Office of the National Cyber Director in December published a guide<\/a> for federal agencies that manage cyber grant programs to help state and local operators of critical infrastructure build cyber resilience into their grant programs.\u00a0<\/p>\n\n\n\n And states are taking their own actions against the threats. For example, Indiana announced this month that it would make cybersecurity assessments<\/a> free to the state\u2019s water and wastewater treatment facilities, with CIO Tracy Barnes stating the program was in reaction to the growing trend of cyberattacks volleyed against the state\u2019s critical infrastructure. Kansas is running a promising cybersecurity training program<\/a> targeted toward critical infrastructure, and it’s gaining attention from other states, including California, Maryland and Texas.<\/p>\n\n\n\n While state IT offices have paid plenty of attention to the gaps in access to broadband over the past several years, the efforts undertaken in 2024 to close the digital divide \u2014 the gap between people who have access to digital technology and internet, and those who do not \u2014 and the federal funds states received to do so developed as another top story.<\/p>\n\n\n\n This year, all 50 states, Washington, D.C., and Puerto Rico had their digital equity plans<\/a> approved by the National Telecommunications and Information Administration<\/a>, allowing many states to begin taking action on how they would use their piece of the $2.75 billion in funds for states created by the Digital Equity Act in the 2021 infrastructure bill and President Joe Biden\u2019s \u201cInternet for All\u201d initiative.<\/p>\n\n\n\n Each plan was unique to the state\u2019s needs in addressing residents\u2019 digital access, skills and ability to afford internet services. For example, Colorado\u2019s plan<\/a> focused on improving digital inclusion for low-income households, aging populations, incarcerated individuals, veterans, people with disabilities, those who do not speak English as their first language, racial and ethnic minorities, and rural communities.<\/p>\n\n\n\n In addition to applying for digital equity funds, states also spent time this year submitting proposals to receive funds from the $42.45 billion federal Broadband Equity, Access and Deployment<\/a>, or BEAD, program. All 50 states submitted their initial proposals<\/a> detailing how they would use the funds to address the lack of high-speed internet access in rural and small communities at the end of last year, with many receiving approvals this year.<\/p>\n\n\n\n However, some state officials complained<\/a> this year that federal guidance published in August on BEAD grants was conflicting and potentially disruptive to their projects. The guidance retracted its earlier preference for fiber optic connectivity in favor of cheaper broadband technologies for remote locations, where fiber connectivity would be too expensive, potentially depleting the program\u2019s funding.<\/p>\n\n\n\n Despite the conflict and workforce challenges<\/a> to build broadband networks, many states are moving ahead with their broadband expansion projects, with state tech leaders this year noting that among the multitude of benefits of closing the digital divide, the work also presents the opportunity to improve cybersecurity<\/a> for small and rural communities.<\/p>\n\n\n\n Similarly to 2022 and 2023, this year was filled with natural disasters and climate-related threats. How agencies used technology to combat and respond to these emergencies was the fifth biggest state IT story of 2024.\u00a0<\/p>\n\n\n\n Some state IT leaders brought lessons learned about natural disasters last year into 2024. Following historic flooding in Vermont in 2023 that took down communication towers and challenged emergency response efforts in and around the state\u2019s capital of Montpelier, Denise Reilly-Hughes, Vermont\u2019s CIO, said she was prepared<\/a> for this year\u2019s flooding, which was caused by heavy rainfall in July. She said in October that flexible response plans, evaluating cyber risks expeditiously and collaborating with emergency management leaders all have become \u201cnew normals\u201d in her job as a result of the flooding events.\u00a0<\/p>\n\n\n\n In Hawaii, last year\u2019s disasters were also still fresh in 2024. A year after the Lahaina wildfires devastated the island of Maui, the Maui Emergency Management Agency<\/a> updated its emergency preparedness and evacuation management systems to better protect residents and tourists from disasters. The Lahaina wildfires \u2014 and Hurricane Helene in Florida<\/a> and North Carolina<\/a> this year \u2014 illustrated the critical need for advanced emergency alert systems to be resilient when providing timely and targeted updates to residents and visitors.<\/p>\n\n\n\n Following Hurricane Helene, Gary Thompson<\/a>, North Carolina\u2019s deputy hazard mitigation officer, shared plans to upgrade the state\u2019s critical communication systems with ultrasonic radar sensors and satellites so they can continue to predict flood zones, issue evacuation warnings and deliver critical information to residents about incoming storms. <\/p>\n\n\n\n In Florida, ahead of this year\u2019s hurricane season which was predicted by National Weather Service forecasters predicting storm activity to be \u201cabove normal<\/a>,\u201d protecting communications among state agencies, emergency management partners and law enforcement during and in the aftermath of weather events were focuses for several Florida cities<\/a> this year. <\/p>\n\n\n\nBut before AI, states need better data<\/h3>\n\n\n\n
Infrastructure as a cyber target<\/h3>\n\n\n\n
Monies to close the digital divide<\/h3>\n\n\n\n
Using tech to combat natural disasters<\/h3>\n\n\n\n