Vermont launches first cybersecurity foundation policy to enhance statewide digital security

In a recent meeting of the Vermont House Energy and Digital Infrastructure, significant strides in cybersecurity were highlighted, showcasing the state's commitment to enhancing its digital security framework. The meeting, held on May 7, 2025, featured discussions led by a cybersecurity official who detailed the extensive monitoring efforts undertaken by their team.

This year, the cybersecurity department plans to monitor an impressive 358.8 billion events, which include user logins, email communications, and API connections. This comprehensive approach aims to bolster the state's defenses against cyber threats. A notable achievement mentioned was the development and publication of Vermont's first-ever cybersecurity foundations policy, a collaborative effort across various branches of the executive government. This policy is expected to standardize cybersecurity practices across state agencies and their partners, ensuring consistency and accountability.

The official also reported on recent successes in thwarting cyber attacks. Over the past nine months, the team has identified more than 52,000 email phishing attempts, with only 16 successfully penetrating the state's defenses. This improvement is attributed to the implementation of a new security tool that has significantly reduced the number of phishing incidents.

In addition to monitoring and policy development, the meeting addressed the importance of endpoint defense. The cybersecurity team is actively managing alerts from various devices, including desktops and servers, to detect potential malware and unusual behaviors. As of the meeting date, 210 alerts had been generated, with a total of 41,000 alerts reviewed in the past 90 days.

The discussions underscored the critical nature of cybersecurity in protecting state infrastructure and data. As Vermont continues to enhance its digital security measures, the collaborative efforts and proactive strategies outlined in the meeting are expected to play a vital role in safeguarding the state's digital landscape. The next steps will likely involve further dissemination of the new policies and ongoing monitoring of cyber threats to ensure the safety of Vermont's digital environment.