Subscribe for email notifications about WVOT outages and updates
About the Security Office
About the Security Office
The West Virginia Office of Technology’s Security Office leads the state’s efforts to protect information, technology systems, and digital services from cyber threats. Our role is to establish and carry out a cybersecurity strategy that balances strong protection with the flexibility needed to support government operations and innovation.
We work to ensure that state employees, agencies, and the public can safely use technology while maintaining trust in digital government services.
Results We Strive For
Results We Strive For
A risk-based approach that prioritizes protecting what matters most.
A cyber-aware culture that empowers employees and citizens alike.
A resilient digital government that safeguards the technology and data essential to serving West Virginians.
Cyber Risk
Cyber Risk
Establish an executive-level cybersecurity steering committee to guide statewide strategy.
Adopt an enterprise-wide approach to leverage shared resources and economies of scale.
Recommend updates to laws and policies to address emerging threats and new technologies.
Cyber Outreach
Cyber Outreach
Build partnerships with public and private organizations to encourage collaboration and information sharing.
Support K-12 and higher education programs to grow a strong cyber workforce.
Promote cybersecurity awareness and training to foster a cyber-aware culture across state government.
Cyber Protection
Cyber Protection
Standardize procurement and configuration of commonly used technology.
Strengthen access management policies using advanced security tools.
Modernize network architecture and boundary protection to improve monitoring and defense.
Cyber Operations
Cyber Operations
Work with critical infrastructure partners to plan and test cyber disruption response strategies.
Enhance detection and response capabilities to identify threats earlier.
Build a proactive cyber operations program to improve resiliency across state systems.
If you believe you've encountered a potential security threat or incident, please report it immediately so our team can investigate and respond appropriately. Timely reporting helps us protect our systems and data.
Click here to report a security incident. You will be redirected to the WVOT Online Computer Security and Privacy Incident Reporting System.
Security Operations Center (SOC)
Security Operations Center (SOC)
The Security Operations Center is the state’s frontline defense against cyber threats. It continuously monitors the enterprise environment to identify, contain, and mitigate risks.
Core services include:
Application layer firewall and filtering services.
Advanced threat detection using virtualization and sandboxing.
Security Information and Event Management (SIEM) for monitoring.
Endpoint protection and malware remediation.
Web filtering to block malicious or inappropriate content.
Digital forensics and investigations when incidents occur.
Risk/FOIA
Risk/FOIA
The Risk/FOIA team focuses on policy, compliance, and risk management. The team works closely with WVOT, other state offices, and agencies to strengthen cybersecurity across government.
Key responsibilities:
Conducting audits and risk assessments of state systems and third-party providers.
Maintaining statewide cybersecurity policies for the Executive Branch.
Delivering cybersecurity training and awareness campaigns.
Operating the Vulnerability Management Program, which scans over 95% of systems for weaknesses.
Supporting outreach activities including conferences, workshops, and inter-agency collaboration.
Training and Awareness
Training and Awareness
Cybersecurity is everyone’s responsibility. The Security Office provides required and annual training for state employees, along with additional awareness resources for both government and the public.
KnowBe4 - Visit KnowBe4 for the latest cybersecurity training, phishing simulations, and awareness tips.
State Learning Management System (LMS) – Our in-house training system offers additional cybersecurity courses to help employees strengthen their knowledge and stay prepared
The Center for Information Security Awareness Training (CFISA) - CFISA offers practical cybersecurity training for individuals, businesses, and organizations. Their courses are designed for anyone interested in learning how to stay safe online and protect sensitive information.
Contact Us!
Contact Us!
Email - CSO@wv.gov
Page updated
Report abuse