Roadmaps

These action projects highlight ongoing efforts supporting the state’s strategic goals. It is not an exhaustive list, as many other efforts across CDT and state departments also contribute.

Goal 1: Advance an Inclusive Digital Experience for All

  1. Outcome 1.1: People-Centric

    Objective 1.1.1.0: Digital Experience

    Ensure that digital interactions with state services are user-centric, efficient, and continuously evolving based on user needs and feedback.

    Source Action Project Measured Results
    Digital Equity *Refine digital equity data and maps: Administer digital equity public survey. 1.1.1.0.6: By Q4 of 2026, publish 2026 digital equity data and maps to the public that are easy to use and accessible.

  2. Outcome 1.2: Accessible

    Objective 1.2.1.0: Digital Literacy

    Ensure that all Californians, particularly the most vulnerable, can fully participate in today's digital society.

    Source Action Project Measured Results
    Digital Equity *Revise, launch and complete implementation of Digital Equity Mapping Tool 2.0 to further develop state asset inventory. 1.2.1.0.1: By Q1 2026, publish baseline of the statewide digital equity asset inventory to assist local entities with identifying resources to meet their needs.
    Digital Equity *Maintain and support the statewide digital inclusion best-practices. 1.2.1.0.4: By Q1 of 2026, Launch Digital Equity Community Practice and Tribal Collaboration working group to meet quarterly over the next five years.

  3. Outcome 1.3: Responsive

    Objective 1.3.1.0: Adaptable Digital Services

    Simplify and streamline processes, increase the adoption of digital services, and be designed to adapt to current and future needs.

    Source Action Project Measured Results
    Digital Equity Refine digital equity data and maps:
    • *Administer digital equity public survey.
    		 1.3.1.0.16: By Q4 of 2026, the number of responses to the digital equity public survey by 10% overall, and by 5% in each California county.
    Digital Equity *Convene digital equity stakeholders to strengthen collaboration:
    • Quarterly convening of the California Broadband Council.
    • *Monthly Digital Equity Community of Practice
    • Quarterly Tribal Collaboration Group*
    		 1.3.1.0.17: By Q1 of 2026, establish monthly Digital Equity Community of Practice and Quarterly Tribal Collaboration Group meetings to increase stakeholder touchpoints by 5% for the sharing of best practices to increase efficiency.

    Objective 1.3.2.0: State Digital Strategy Update

    Develop plan for the update of the State Digital Strategy.

    Source Action Project Measured Results
    TIAC State Digital Strategy Update Design 1.3.2.0.1: By Q2 of 2026, finalize key priorities and projects for the State Digital Strategy by engaging with key relevant stakeholders, including but not limited to AIOs and CIOs
    1.3.2.0.2: By Q3 of 2026, publish the updated State Digital Strategy.

Goal 2: Secure California's Technology Investments

  1. Outcome 2.1: Cyber Hygiene

    Objective 2.1.1.0: Proactive Cybersecurity

    Strengthen our cyber security posture to reduce the likelihood of cyber security incidents and minimize their impact to Californians by ensuring highest risk entities are taking appropriate steps to reduce risk.

    Source Action Project Measured Results
    Cal-Secure / ISAC Improve statewide security enterprise risk management. 2.1.1.0.3: (KR1.1.3) By Q4 of 2026, establish "Advisory Services Program" points of contact with 110 reporting entities.
    Cal-Secure / ISAC Enhance cybersecurity assurance for customers by validating monitoring effectiveness, addressing risks, and confirming resilience against evolving threats and anomalous activity. 2.1.1.0.5: Each quarter of 2026, conduct 25 Security Operations Center as a Service (SOCaaS) Health Checks to improve monitoring and resiliency.
    Cal-Secure / ISAC Establish a statewide Security AI Program to guide the responsible use of AI in cybersecurity, ensuring adoption aligns with federal frameworks and ethical standards. The program will equip entities with risk assessment consultations, standardized playbooks, and best practices to support consistent, secure implementation of AI across the state. 2.1.1.0.6: By Q3 of 2026, develop a guide for responsible statewide AI adoption through standards, risk assessments, and security best practices.
    Cal-Secure / ISAC Establish a statewide baseline cost guidance for cybersecurity spending and resources, aligned to national industry standards, to improve transparency and support informed cybersecurity investment decisions.

    2.1.1.0.8: By Q2 of 2026, develop a baseline of statewide cybersecurity spending based on nationally recognized industry standards.

    2.1.1.0.9 By Q3 of 2026, share findings from statewide cybersecurity spending analysis with state leaders to assist with prioritizing state cybersecurity investments.

  2. Outcome 2.2: Cyber Resilience

    Objective 2.2.1.0: Adaptable Cybersecurity

    Revise all information security policies and standards, frameworks, or strategic plans that align with the current and future threat landscape and further develop and update the Statewide Information Management Manual (SIMM) to provide information security leadership, vision, and strategy for state entities.

    Source Action Project Measured Results
    Cal-Secure / ISAC Transform state cybersecurity policies and standards.

    2.2.1.0.4: By Q2 of 2026, publish five additional security policy/procedure templates for departments to use to close internal security gaps.

    2.2.1.0.5: By Q2 of 2026, update the library of Wave example templates to include CSF 2.0 changes.

    2.2.1.0.5: By Q4 of 2026, measure the adoption of new templates by covered departments.
    Cal-Secure / ISAC Strengthen enterprise risk management by conducting director-level debriefings with high-risk agencies. 2.2.1.0.7: By Q3 of 2026, brief five high-risk agency directors/heads on responsibilities related to critical and high-priority vulnerabilities.
    Cal-Secure / ISAC Ensure statewide progress toward ZTA to establish a consistent baseline of secure identity, access, and network protections across government operations. 2.2.1.0.8: By Q4 of 2026, develop Level 1 Zero Trust policy maturity outlining implementation capacity, validated through statewide maturity assessments.

  3. Outcome 2.3: Cyber Maturity

    Objective 2.3.1.0: Advanced Cybersecurity

    Simplify and Align the OES Statewide Maturity Metric Scoring Methodology with New and Revised Federal Standards and Frameworks by revising SIMM 5300-C Cybersecurity Maturity Metric scoring to align with NIST CSF 2.0, simplifying scoring criteria, and modifying weighting to present a better picture of risk.

    Source Action Project Measured Results
    Cal-Secure / ISAC Demonstrate measurable improvements in cybersecurity maturity for entities undergoing audits or Independent Security Assessments (ISAs). 2.3.1.0.4: By Q4 of 2026, 15% of entities show an increased score in their Cybersecurity Maturity Metric scores after an audit or ISA engagement.
    Cal-Secure / ISAC *Increase compliance reporting of System Security Plans (SSPs) for state-critical systems inventory and prioritize assets and identify statewide gaps and deficiencies. 2.3.1.0.5: By Q4 of 2026, modify the process for reviewing and collecting System Security Plans to improve compliance reporting for state-critical systems.
    Cal-Secure / ISAC Strengthen statewide cybersecurity innovation by engaging community-led groups to shape technology requirements, inform enterprise standards, and ensure practices remain aligned with statewide strategy and future needs.

    2.3.1.0.6: By Q1 of 2026, complete a draft of Cal-Secure v2.0.

    2.3.1.0.7: By Q2 of 2026, publish Cal-Secure 2.0.

    2.3.1.0.8: By Q3 of 2026, socialize new cybersecurity capabilities and outcomes included in Cal-Secure 2.0 to inform 2027 assessments and audit criteria.

Goal 3: Strengthen California’s Public Sector Technology Workforce for Today and Tomorrow

  1. Outcome 3.1: Prepared

    Objective 3.1.1.0: Prepared Technology Workforce

    Prioritize learning and skills development, promote career growth through training, and foster a world-class workforce equipped to adopt emerging technologies.

    Source Action Project Measured Results
    WDAC Expand training offerings on emerging technologies, including the addition of a new Generative Artificial Intelligence (GenAI) Bootcamp for technologists.

    3.1.1.0.4: By Q2 of 2026, add at least three new training courses for emerging technologies.

    3.1.1.0.5: By Q3 of 2026, conduct an annual statewide training survey to identify the top technology training needs for FY 26/27.

    3.1.1.0.6: By Q4 of 2026, offer the 1st GenAI Bootcamp for state technologists.

  2. Outcome 3.2: Engaged

    Objective 3.2.1.0: Engaged Technology Workforce

    Maintain effective IT workforce planning strategies, inspire a statewide technology culture, and implement robust knowledge-sharing opportunities.

    Source Action Project Measured Results
    WDAC Expand participation in technology events and IT career fairs. 3.2.1.0.3: By Q4 of 2026, participate in at least three new events/career fairs.
    WDAC Bring state IT leaders together to collaborate on Envision 2026. 3.2.1.0.4: By Q3 of 2026, hold at least two strategic planning workshops for state IT leaders.

  3. Outcome 3.3: Destination Employer

    Objective 3.3.1.0: Destination Employer

    Streamline hiring processes, align recruitment, retention, and development activities with industry best practices, and adopt the Workforce Development Framework from GovOps/CalHR.

    Source Action Project Measured Results
    WDAC Expand IT and Cybersecurity pipelines through Internship programs. 3.3.1.0.3: By Q3 of 2026, place up to 20 AI-focused interns within state departments, establishing early talent pathways in emerging tech fields.
    WDAC Develop a Hiring Guide that provides departments with flexible, merit-based strategies to accelerate recruitment, selection, and hiring while upholding civil service principles. 3.3.1.0.4: By Q1 of 2026, at the conclusion of the State Hiring Guide pilot, distribute the guide to all state departments and establish an ongoing communications channel to respond to department questions and provide implementation support.
    WDAC Create a California-specific career site modeled after GoGovernment.org to spotlight State opportunities, demystify the hiring process, and help Californians discover meaningful careers in government. 3.3.1.0.5: By Q2 of 2026, launch the State Career site with dedicated sections for IT roles, explicitly showcasing that state IT jobs do not require a college degree.

Goal 4: Align Strategy Execution Across the State

  1. Outcome 4.1: Shared Purpose

    Objective 4.1.1.0: Aligned Technology Strategy

    Streamline hiring processes, align recruitment, retention, and development activities with industry best practices, and adopt the Align agency and department technology goals to the statewide technology strategic plan, promote cross-agency participation in technology governance, and foster collaboration with technology and business leaders to ensure strategic alignment in technology execution.

    Source Action Project Measured Results
    SISMO Develop 2027 Annual Roadmap 4.1.1.0.4: By Q4 of 2026, complete the development of the 2027 Roadmap.
    SISMO Engage Stakeholders in Roadmap Development 4.1.1.0.5: By Q4 of 2026, every state agency represented by an AIO contributes three to five action projects to the 2026/2027 Annual Roadmap.
    SISMO Define the process for creating the next multi-year statewide technology strategy 4.1.1.0.6: By Q4 of 2026, have a completed process documented for use in creating the next multi-year statewide technology strategy.

  2. Outcome 4.2: Strategic Progress

    Objective 4.2.1.0: Prioritized Technology Strategy Management

    Seize agile opportunities, prioritize a comprehensive technology portfolio, and recognize, reward, and grow technology strategy management successes.

    Source Action Project Measured Results
    SISMO Implement and manage the adoption of Envision 2026 and the Roadmap 2026. 4.2.1.0.5: By Q4 of 2026, ensure continued alignment and support adoption efforts by completing two engagement events.
    SISMO *Implement and manage the adoption of the Statewide Technology Strategy Planning Methodology

    4.2.1.0.6: By Q4 of 2026, achieve a 95% submission rate for quarterly OKR updates by all participating departments and leaders in 2026.

    4.2.1.0.7: By Q4 of 2026, conduct one methodology training session.

  3. Outcome 4.3: Performance Excellence

    Objective 4.3.1.0: Statewide Technology Strategy Results

    Execute statewide technology strategies, achieve desired outcomes, and provide annual reports on technology accomplishments across agencies and departments.

    Source Action Project Measured Results
    SISMO Collect Roadmap 2026 OKR data.

    4.3.1.0.4: By Q4 of 2026, publish the annual report, celebrating the value realized from the state projects aligned with Envision 2026.

    4.3.1.0.5: By Q1 of 2026, complete the creation of the Quarterly Progress Dashboard System for OKR Reporting.

    SISMO Create a Quarterly Progress Dashboard System for OKR Reporting.

    4.3.1.0.4: By Q4 of 2026, publish the annual report, celebrating the value realized from the state projects aligned with Envision 2026.

    4.3.1.0.5: By Q1 of 2026, complete the creation of the Quarterly Progress Dashboard System for OKR Reporting.

    SISMO Support the publishing of the 2026 Annual Report.

    4.3.1.0.4: By Q4 of 2026, publish the annual report, celebrating the value realized from the state projects aligned with Envision 2026.

    4.3.1.0.5: By Q1 of 2026, complete the creation of the Quarterly Progress Dashboard System for OKR Reporting.

Goal 5: Continually Future-Proof the Business of Government

  1. Outcome 5.1: Public Trust

    Objective 5.1.1.0: Trusted Government Services

    Achieve a shared understanding among business and technology leaders on future-proofing government services, strengthening emergency preparedness, and adopting the Cloud Smart approach to maximize technology investments.

    Source Action Project Measured Results
    TIAC AI Readiness Framework Creation

    5.1.2.0.1: By Q2 of 2026, develop and update as appropriate foundational governance frameworks for governing and adopting AI in the state of California, including definitions, standards, and alignment with national and international standards.

    5.1.2.0.2: By Q3 of 2026, co-develop with departments and agencies' best practices for deploying AI effectively to deliver services to Californians.

    5.1.2.0.3: By Q3 of 2026, partner with external institutions, including academic and nonprofit partners, on best practices to govern, adopt, and deploy AI in the service of Californians.

    5.1.2.0.4: By Q4 of 2026, develop best practices for protecting vulnerable communities, including children, from harmful aspects of emerging technologies, including AI.

  2. Outcome 5.2: Modularity

    Objective 5.2.1.0: Adaptable Government Services

    Establish an Adaptive Solutions Framework that encourages use of statewide solutions while supporting unique value delivered by programs throughout agencies and departments.

    Source Action Project Measured Results
    PDAC Project Content Management (CMS) and Data Reporting Infrastructure 5.2.1.0.3: By Q2 of 2026, baseline the percentage of projects leveraging different deployment methodologies (i.e., agile, waterfall, hybrid) and demonstrating increased responsiveness to changing demands.

    Objective 5.2.2.0 Mission-Critical System Health

    Agency CIOs maintain a transparent, actionable view of the health of their mission-critical IT systems, using either CDT’s statewide dashboard service or their own aligned tool, so California can modernize and stabilize systems strategically.

    Source Action Project Measured Results
    TIAC Critical System Health and Hygiene Assessment 5.2.2.0.1: By Q2 of 2026, present the statewide assessment framework, including criteria and metrics, to STC for endorsement, enabling department(s) to conduct self-assessments of IT system health and hygiene with a focus on critical systems.

    Objective 5.2.3.0 Consolidate Duplicative Processes

    Enable California’s Agency CIOs to identify and launch high-impact transformation opportunities that consolidate duplicative processes into streamlined digital services, improving efficiency, reducing costs, and enhancing the experience for Californians and government employees.

    Source Action Project Measured Results
    TIAC Statewide Digitization Framework 5.2.3.0.1: By Q2 of 2026, the STC endorses a statewide framework for digitizing state services, enabling departments to nominate candidates for digital transformation and engagement within the Statewide emerging tech accelerator program, as well as other vehicles for digitization.
    TIAC *Statewide Digitization Framework Adoption

    5.2.3.0.2: By Q3 of 2026, agencies nominate candidates for multi-agency review through the STC-endorsed pipeline.

    5.2.3.0.3: By Q4 of 2026, five STC priority areas are mapped to discovery sprints/assessments for programs for potential digitization and/or modernization per year, focused on service duplication and inefficiency.

  3. Outcome 5.3: Emerging Tech Readiness

    Objective 5.3.1.0: Advancing Government Services

    Emerging Technology Governance Framework.

    Source Action Project Measured Results
    PDAC *Expand the use of challenge-based procurements 5.3.1.0.4: By Q3 of 2026, achieve an annual 10-20% increase in challenge-based procurements and joint ventures with external partners.
    PDAC Develop policies and procedures to streamline the time to approve and procure technology projects. 5.3.1.0.5: By Q4 of 2026, reduce the average time to approve state technology projects (excluding time to obtain funding) to 120 days in the project approval process.