Texas Cyber Command describes shift from reactive incident response to statewide prevention
Summary
Texas Cyber Command told the committee it has transferred staff and responsibilities from DIR, opened operations in San Antonio and Austin, and is building threat intelligence, incident response, SOCs and a volunteer incident response team to shift to proactive prevention and statewide standards.
Chief of Texas Cyber Command TJ White told the committee the command activated March 1 and has taken on transferred cybersecurity responsibilities from DIR, is operating joint SOC capacities and has begun incident responses and support for major events and university incidents.
"We are shifting the state cyber posture from primarily reactive incident response towards proactive prevention, enhanced readiness, and increased resilience," White said, describing five core capabilities the command is building: threat‑intelligence center, incident response unit, security operations center, statewide information‑sharing analytic organization, and a digital forensics laboratory.
White described outreach to regional CISOs, plans to professionalize and scale the Volunteer Incident Response Team (VIRT) with U.S. citizen and background‑check requirements, and work to improve visibility across state networks and sensor coverage. Members asked how TXCC prioritizes resources for smaller local governments; White said he expects to pursue fee‑for‑service or managed security options to extend capability to rural jurisdictions.
Why it matters: TXCC centralizes cybersecurity authority the legislature created and its choices about monitoring, reporting, and assistance will affect how state and local agencies detect and respond to cyber threats.
AI generated
The text on this page is AI generated. Summaries, highlights, analysis, and video transcripts are all produced from the original source material.
AI can make mistakes, so if you spot one, and we will fix it for everyone.
Note: the source content is unaltered by us. Any content source we link to, be it a video, an audio recording, or a document, is presented exactly as its publisher released it. That publisher is usually a government body, sometimes an individual official or another organisation.
