"Relationship capital is often more influential than statutory authority in critical infrastructure cybersecurity, which often cuts across typical organizational and jurisdictional boundaries. As one state said, “winning the hearts and minds” can be the most challenging aspect. At the same time, states are making notable strides through whole-of-state service models, collaborative governance and increasingly sophisticated operational partnerships. " Â
"In New Jersey, CISO Michael Geraghty told us of his state’s highly integrated model where cybersecurity is treated as an all-hazards, whole-of-state responsibility. The New Jersey critical infrastructure cyber coordination model favors strong governance, robust sector engagement and practical operational partnerships. As Geraghty told us, “You can’t simply tell local governments that you’re from the state and you’re here to help, you have to demonstrate it through meaningful action. When you consistently deliver on your commitments and provide real value, the communities you’ve helped become your strongest advocates, and their trust encourages others to seek your assistance. Conversely, failing to follow through on your promises can quickly become your greatest liability, undermining confidence in your organization.”Â