Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Csac Operations topic
No spam. Unsubscribe anytime.
Subcommittee questions CSAC request for operations funding and a chief information security officer amid staffing and data concerns
Summary
CSAC asked for one‑time and ongoing augmentations for operating costs and a $230,000 ongoing appropriation for a chief information security officer. LAO sought more detail on workload and programmatic implications; CSAC warned that additional cuts would harm service delivery and cybersecurity monitoring.
The subcommittee examined a package of operations requests from the California Student Aid Commission aimed at addressing rising operating costs, contracted IT services and cybersecurity needs.
Department of Finance described two CSAC budget change proposals: one for an ongoing chief information security officer (CISO) position at about $230,000 and a second to cover rising operating expenses and equipment — originally presented as $1.9 million one‑time and $3.4 million ongoing (DOF said May revision will adjust those figures downward modestly due to accounting corrections). Natalie Gonzales of the Legislative Analyst’s Office said LAO needs more detail about specific workload gaps before approving the larger operations ask but supported the CISO request because CSAC holds large volumes of sensitive student data and reported increasing fraud attempts.
Jake Bremner of CSAC told lawmakers the commission currently serves more than 520,000 students and administers more than $3 billion in state financial aid; he said CSAC has been heavily lean on staff and that recent control‑section drilling initially targeted five positions but Finance restored four, leaving a net reduction in funded staff time the agencies quantified as a small fraction of a position. Bremner warned further cuts could force staff reductions or service reductions affecting call center response, grant processing timelines, cybersecurity work and outreach.
Bremner and LAO emphasized the CISO role is a leadership position that would coordinate internal cybersecurity strategy, protect sensitive data and help mitigate fraud attempts; LAO recommended approving the CISO while requesting additional documentation on workload and how additional operations funds would be used to fill critical gaps.
Committee direction: members asked CSAC to supply a clear workload analysis (which LAO had requested), to detail programmatic consequences tied to identified staffing shortfalls and to quantify how a CISO and operations funding would reduce fraud and operational risk. The subcommittee left the item open for follow‑up.
