Introduction

From learning to leadership: AI in government

Leading responsible AI use in Minnesota government

From AI planning to enterprise execution

Minnesota moved from AI planning to responsible, enterprise-scale execution in 2025. Building on foundational work, MNIT and state agencies focused on governance, workforce readiness, and measurable results — ensuring innovation advanced safely, consistently, and at scale.

Testing generative AI safely for state government use

In 2025, MNIT completed a pilot initiative to explore how state agencies can safely use advanced generative AI tools to enhance their work. Technical knowledge is sometimes a barrier to entry for state employees and Minnesota’s Technology Advisory Council (TAC) recommended giving state employees simple, plain language ways to interact with these tools. With support from the TMF, MNIT tested a chatbot development platform named nebulaONE.

This generative AI platform gives users a secure interface to test AI tools such as retrieval-augmented generation, custom chatbots, and task-specific agents in a controlled environment.

The pilot aimed to understand how state agencies could use generative AI while meeting Minnesota’s existing security and data protection standards. The team focused on testing where AI adds value, identifying risks, and defining appropriate safeguards for government use. Work included configuring the platform, training staff, and building and testing chatbot prototypes using only Low- or Moderate-impact data — meaning publicly available or without a federal compliance requirement.

By learning what works in a government environment, MNIT can establish a repeatable model that agencies can adopt — reducing risk and duplicated effort. The platform provides a secure toolkit for testing task-specific AI agents, such as chatbots that answer questions using trusted public information.

The project demonstrated how AI assistants can support internal knowledge sharing and everyday operations without exposing sensitive data or bypassing required controls, laying the groundwork for agencies to help employees work more efficiently for Minnesotans.

Modernization in motion: Enhancing services for Minnesota residents

Secure by design

Overview of 2025

MNIT leads a whole-of-state approach to cybersecurity, bringing together individuals, local governments, state agencies, and legislators to defend Minnesota’s digital infrastructure. This shared work protects more than 100,000 system users and the private data of 5.7 million Minnesotans.

MNIT serves as a vital link connecting the state’s counties, cities, townships, public schools, critical infrastructure, and Tribal governments. Together with our federal, state, and local partners, we work to protect Minnesotans’ data and strengthen our shared infrastructure against persistent, ever-evolving cybersecurity threats.

Minnesota delivers a coordinated, whole-of-state approach to bolster cyber resiliency. MNIT and its partners continue to expand collaboration, improve communication, share resources, apply industry best practices, and increase access to advanced tools that help prevent, detect, and respond to cyber threats.

As we navigate the changing cybersecurity landscape, we also partner with the TAC and the Minnesota Cybersecurity Task Force, which brings together a range of public- and private-sector cybersecurity experts. The insights and expertise shared through these partnerships help MNIT better understand emerging needs and opportunities.

MNIT strategically bolsters cybersecurity across Minnesota

MNIT continues to strategically modernize security efforts and expand collaboration with state and local partners across Minnesota. Together, we safeguard data and systems, mitigate risk, and improve organizational effectiveness and customer relationships.

As more state services move online, protecting the digital data Minnesotans rely on remains core to the business of state government. Through key initiatives and day-to-day operations, MNIT continues to mature cybersecurity services and advance strategic goals as it:

• Attracts and retains talent in a highly competitive environment.
• We grew our highly skilled cybersecurity team, adding a cyber threat intelligence lead and a new Security Operations Center (SOC) manager.
• Convenes and leads state, local, territorial, and Tribal (SLTT) entities in Minnesota to build and implement a whole-of-state cybersecurity framework.
• Minnesota Cybersecurity Task Force meets quarterly, with meetings open to the public.
• MNIT hosts a monthly connection meeting with county IT leaders.
• MNIT participates in quarterly Minnesota Indian Affairs Council meetings and provides resources through the Statewide Security Monitoring Initiative and Whole-of-State Cybersecurity Plan.
• MNIT hosts an information-sharing site with 400+ SLTT members and leads monthly sessions where cyber information is shared for awareness and preparedness.
• Embeds a security mindset into everything we do by building expertise across MNIT and the executive branch through training, communications, and engagement.
• Publish quarterly Cybersecurity Monitor newsletter for all state employees in the executive branch to raise awareness of cyber threats, trends, and active security initiatives.
• Send biannual phishing awareness emails to executive branch employees to highlight common tactics and how to recognize and report phishing attempts.
• Reinforce employee skills through regular monthly phishing training campaigns that improve recognition and response confidence.
• Educate the public and state employees in the executive branch during Cybersecurity Awareness Month in October about how to develop strong cyber habits.
• Deliver presentations and participate in public engagements year-round through MNIT’s Cyber Navigator team and other security leaders.
• Require all executive branch employees to complete annual security compliance training.
• Implement an Always Verify (Zero Trust) security framework that authenticates, authorizes, and continuously validates users before granting or maintaining access to applications and data.
• Reduces business impacts when cybersecurity events occur.
• Focus on prevention, preparedness, response, and recovery, to keep operations running.
• Develop and roll out grant-subsidized services to local government entities in Minnesota to bolster their cyber resiliency and protect Minnesotans’ data. MNIT added Next-Generation Security Information and Event Management (Next-Gen SIEM) and Malicious Domain Blocking and Reporting (MDBR) to the three cybersecurity services we began offering in 2024.
• Limit exposure upfront, respond decisively, communicate clearly, and learn fast — turning security from an IT problem into an operational resilience capability.
• Implement a strong third-party risk program to ensure partners and vendors practice strong cyber hygiene as a shared responsibility to protect Minnesota’s data and systems.
• Focus on modernizing tools, processes, and staff skillset to minimize the risk of incidents in this quickly changing cyber landscape.
• Reduce low-value controls and processes to allow greater efficiency for the business to operate.
• Refines operating models, adopts agile approaches, and sets up attribute-driven assessments.
• Use continuous process improvement to enable MNIT to adapt quickly to evolving cyber needs.
• Implement automation where possible to reduce reliance on self-attestation.
• Foster a collaborative product environment that clarifies ownership and decision rights, applies agile delivery, and tracks risk reduction and maturity to enable real-time, data-driven decisions.

Security by the numbers

MNIT reaches new milestone for protecting Minnesotans’ data

Minnesota’s managed detection and response service now provides 24/7/365 protection to more than 215 local government entities, actively stopping cyber threats before they disrupt services or compromise data. Offered through the Whole-of-State Cybersecurity program, MDR marks a significant milestone in statewide cyber defense.

Counties, cities, K-12 schools, townships, Tribal Nations, and critical infrastructure organizations use MNIT’s endpoint detection and response tools to identify and block attacks that can lead to data breaches, ransomware, and other major incidents. Today, MDR protects more than 65,000 endpoints — workstations and servers across Minnesota — continuously monitoring systems to detect and stop threats before they cause harm.

This work goes beyond protecting county, city, and public school systems to safeguard the personal information Minnesotans rely on most, including health, tax, and education data. Through MDR, counties and cities protect sensitive information such as property records, infrastructure details, criminal justice files, water system data, and communications with residents. By preventing ransomware and data breaches, MDR keeps critical services online and secure — allowing local governments to serve Minnesotans without disruption.

MNIT’s MDR services detected millions of threats, including more than 107,000 with the potential to disrupt government services. With the average cost of a data breach exceeding $2.8 million, preventing these incidents represents an estimated savings of nearly $300 million for Minnesota government entities.

MNIT detected these threats across 215 local entities and more than 100 executive branch agencies, offices, boards, commissions, and councils — protecting roughly 120,000 endpoints, including more than 65,000 outside Minnesota’s executive branch. MNIT continues to onboard new organizations to the program from the approximately 3,300 eligible entities statewide.

Widespread protection of MNIT’s managed detection and response

CIR law strengthens information sharing, boosts cyber defenses

Minnesota’s cybersecurity incident reporting law gives the state a clearer, faster view of cyber threats by centralizing incident reporting across public entities. This shared intelligence enables MNIT to issue timely threat advisories, support rapid response, and share insights that help Minnesota governments defend against evolving risks.

After the Minnesota Legislature amended state law in 2024, MNIT partnered with the BCA to launch a secure online reporting form for public agencies and government. When the law took effect on Dec. 1, 2024, public entities immediately began using the form to report cybersecurity incidents affecting services, systems, or people.

Early reporting reflects a broad cross-section of Minnesota’s public sector and local government partners and captures a wide range of cybersecurity events. In the first year of data collection through the CIR, from Dec. 1, 2024, through Nov. 30, 2025, Minnesota received 334 reports through the CIR online form.

• 283 of the 334 reports were in-scope, meaning they were confirmed cyber events or potential cyber events that affected public agencies or personnel during the reporting period.
• 269 of the 283 in-scope reports were from non-executive branch entities such as counties, cities and K-12 schools.

Data from CIR submissions gives MNIT and its partners clearer insight into who attackers target, which threats continue to emerge, and how cyber incidents affect services and operations. MNIT uses this information to prioritize the tools, resources, and actions that strengthen defenses and prevent future incidents.

As cyber threats evolve, the CIR law continues to serve as a critical foundation for reporting, documenting, responding to, and mitigating incidents. It also strengthens the bridge between state and local partners by improving communication, accelerating information sharing, and reinforcing the collaboration Minnesota relies on to defend against cyber events.

Educating state employees and the public

As the information technology agency for Minnesota’s executive branch, MNIT takes seriously its responsibility for protecting the information that Minnesotans entrust to us. Cybersecurity is everyone’s responsibility. We continue to find opportunities to boost awareness and share security tips, resources, and information to protect the State of Minnesota.

Cybersecurity Awareness Month

Governor Tim Walz proclaimed October 2025 as Cybersecurity Awareness Month in Minnesota. Throughout the month, MNIT shared cybersecurity tips publicly and internally to raise awareness about online safety and cybersecurity best practices.

To raise public awareness about online safety, MNIT shared practical cybersecurity tips on social media. These posts covered a range of topics, such as recognizing phishing attempts, securing personal devices, and using strong, unique passwords. The goal was to equip Minnesotans with the knowledge they need to protect their online presence from evolving cyber threats.

For state employees, MNIT launched an internal messaging campaign that reinforced the importance of cybersecurity within the workplace. The campaign focused on educating employees about best practices for securing state systems and data, with clear instructions on reporting suspicious activities. Employees were encouraged to stay vigilant, follow secure communication protocols, and participate in training sessions to understand emerging cyber threats.

This campaign is aided by additional security training for employees like phishing awareness campaigns and federally required annual training. By using public and internal channels, MNIT worked to foster a culture of cybersecurity mindfulness throughout Minnesota, ensuring that residents and state workers remained informed and proactive in protecting digital assets.

Minnesota Military Cyber Symposium

Minnesota’s Chief Information Security Officer (CISO) and MNIT’s Assistant Commissioner John Israel spoke at the second annual Military Cyber Symposium at Metro State University (MSU) in St. Paul on Sept. 13, 2025, organized by the Minnesota National Guard Cyber Coordination Cell (C3). The symposium brought together cyber professionals from around the world, including Minnesota’s State Partnership Program partner nation, Norway. Airmen and soldiers joined state, federal, and international partners, in sharing experiences, best practices, and lessons learned over the last year.

Cyber Security Summit

MNIT leadership and staff were heavily involved in speaking, sharing resources, and leading sessions during the 15th annual Cyber Security Summit in Minneapolis in October.

Public Sector Village

MNIT and the National Guard C3 hosted a Public Sector Village during the Cyber Security Summit to address the broad range of persistent cyber threats that challenge government at all levels. Township, city, county, Tribal, state and federal professionals learned from top security experts about identity protection, Criminal Justice Information Services compliance, cyber insurance, artificial intelligence impacts, and social media risks. Participants explored the cybersecurity tools and shared services available to Minnesota’s public entities, as well as how to leverage no cost and discounted resources for detection, response, and incident support.

Building a cybersecurity program

MNIT Governance, Risk, and Compliance Policy Lead Ron Olsen led the Cyber 101 sessions “Building Blocks: Developing a Comprehensive Cybersecurity Program.” He explained how to build a strong cybersecurity program through standards, governance, and strategic alignment. The session covered risk mitigation, accountability frameworks, and oversight processes to help organizations enhance resilience, protect assets, and align cybersecurity efforts with business goals in today’s evolving threat landscape.

Highlighting state careers

During the Summit’s careers breakfast for students and seasoned cyber professionals, MNIT leaders — Minnesota’s CISO and MNIT Assistant Commissioner John Israel, Minnesota’s Deputy CISO Jen VanDemmeltraadt, and MNIT’s Director of Agency Strategic Security Chris Luhman — shared information and offered insight on cybersecurity careers within the State of Minnesota.

Being prepared led to a quick, unified response to cyberattack

Federal, state, and local governments continue to rise in both frequency and sophistication of cyberattacks. These attacks disrupt critical services, steal data, and lead to ransomware, raising serious safety and security concerns for the public. The cyberattack that targeted the City of St. Paul’s critical systems and digital services in July caused significant disruptions. This cyberattack is not unique — other cities, counties, and schools have experienced similar incidents in the past year. These incidents underscore the need to work together, share resources, strengthen security programs, and build a strong cybersecurity culture across Minnesota.

The portion of the City of St. Paul’s computers that were enrolled in MNIT’s MDR program performed as expected — MDR detected the malicious activity and alerted city officials. The city’s systems that were compromised in the cyber incident were not part of MNIT’s MDR program. During the Minnesota Cybersecurity Task Force’s November meeting, City of St. Paul officials credited the task force and MNIT for having the foresight to establish the MDR program, saying it had proven its strength to detect cyber threats.

The magnitude and complexity of the cybersecurity incident exceeded the city’s response capacity, and St. Paul officials closely coordinated with MNIT and an external cybersecurity vendor. Governor Tim Walz issued an executive order activating the Minnesota National Guard cyber protection teams — for the first time in state history — to address the incident and ensure vital municipal services continued. Together, the city, MNIT, National Guard, and other state and federal entities worked around the clock to ensure continuity of vital services and the safety and security of St. Paul residents.

Protecting the technology, data, and systems that make our government and schools run is one of our highest priorities. MNIT helps public entities protect their technology, data, and systems to keep them running securely. We provide local entities, Tribal Nations, public schools, public health, critical infrastructure, and peacekeepers the cybersecurity tools and resources they need at no or low cost. MNIT’s whole-of-state approach uses state funding and federal grants to protect Minnesotans’ data by advancing stronger, sustainable cybersecurity tools and processes that leverage best practices, build on past successes, and meet every organization where they are at.

We have seen the value of building trusted partnerships among all levels of government, through sharing communication, information, and support. The steps state and local government entities have taken to prepare and defend data and networks has proven to make a difference.

St. Paul continues its recovery efforts

The July cyberattack on the City of St. Paul reflects a broader rise in ransomware attacks affecting government at all levels, as well as organizations across every sector. The City’s quick, decisive response limited the impact, protected critical services, and positioned its systems for a safe and secure recovery.

City leaders provided ongoing communication and transparency, brought in state and federal partners, and shared information with them, resulting in a collaborative response and recovery effort. The National Guard’s Cyber Protection Team provided 17 consecutive days of support in its first mobilization, strengthening the city’s efforts. City leaders have openly shared lessons learned to help other local governments build their defenses and prevent a similar cyberattack. Since then, MNIT has seen an increase in the number of public entities using MNIT’s MDR services.

Ongoing actions

• Lessons learned shared with other municipalities.
• Focus on strengthening defenses, backups, and staff training.
• Accelerate modernization and resilience efforts to strengthen its long-term cybersecurity posture.

Minnesota enhances cybersecurity defenses with GovRAMP partnership

MNIT teams resolve 7+ million security vulnerabilities through TVMU

BISOs partner with agencies to ensure security, business goals align

MNIT updated its organizational structure to better serve Minnesotans and our partnering agencies. The reorganization included standardizing the role of MNIT’s five Business Information Security Officers (BISOs). They are the main liaisons between state agency partners and MNIT security leadership. BISOs help agencies do business safely. They manage cybersecurity strategy, governance, and risk management, while ensuring security objectives align with business goals. Each BISO is accountable for coordinating security across multiple agencies and ensuring alignment with enterprise security policies, while addressing agency-specific risks.

Statewide account security update with multi-factor authentication

In 2025, MNIT completed a major statewide effort to strengthen how State of Minnesota employees securely access their work accounts. The project expanded the use of multi-factor authentication (MFA), a security step that asks users to verify their identity in addition to entering a password. This verification may include a prompt on a mobile app or the use of a physical security key.

MFA had been available to state employees for several years as an optional tool through the vendor. As cyber threats increased and national security standards evolved, MNIT identified the need for a consistent approach to account security across the executive branch.

MNIT launched an enterprise project to require MFA for all executive branch employees and to roll out an authenticator app statewide. Based on lessons from earlier modernization efforts, the project emphasized clear communication, advance notice, and user readiness. MNIT worked closely with agencies to schedule phased rollouts, identify blackout dates, and avoid interruptions to critical business operations.

The project team also addressed different workplace needs. For staff who could not use a mobile app, MNIT provided alternatives such as physical security key fobs. Agencies received step-by-step instructions, access to office hours, and support from the Enterprise Service Desk to help employees prepare and troubleshoot issues. What began as an optional security feature is now a routine part of daily work, helping keep state systems, and the services Minnesotans rely on, secure and reliable.

Today, about 80% of state employees use MFA to protect their accounts. In addition to specialized accounts, some users work in locations or roles with restrictions on what they can use to verify their identity. MNIT is working with agencies to identify approved solutions for these locations and continue progress toward full multi-factor authentication coverage.

Collaboration, impact, and team connectedness

Return-to-office transition underway across state government

In alignment with Governor Tim Walz’s updated telework policy, MNIT implemented a return-to-office (RTO) transition effective June 1, 2025. Under HR/LR Policy #1422, most state agency employees now work in person at least 50% of their scheduled workdays, establishing a new baseline for hybrid work across state government.

MNIT approached the transition with careful planning, strong coordination, and employee support, establishing three internal subcommittees to guide the work:

• Policy and implementation
• Employee communication and support
• Workspace planning

These groups work in coordination with Enterprise Services’ RTO project to support agency partners as they return to, reconfigure, or expand office spaces over time. MNIT aligned its operations with planning efforts that prioritize transparency, regular updates, and opportunities for employee feedback.

MNIT’s Executive Steering Team oversees key initiatives supporting the return to office, informed by input from internal subcommittees and agency leadership. As the transition continues, MNIT evaluates workspace needs, supports employees through change, and maintains reliable service delivery for Minnesotans while balancing remote flexibility with in-person collaboration.

Supporting a thriving hybrid workplace

Updated Accessibility Quick Cards advance inclusive digital practices

The Office of Accessibility (OoA), working with Digital Accessibility Coordinators and subject-matter experts across state agencies, released updated Accessibility Quick Cards to reflect current standards and best practices.

The updates include:

• Adoption of the Web Content Accessibility Guidelines (WCAG) 2.1.
• Application-specific guidance for Microsoft Office, Adobe, and web tools.
• Plain-language and active-voice revisions that improve clarity and usability.

These streamlined resources help state employees apply accessibility principles in their daily work. Designed for quick refreshers and at-a-glance learning, the Quick Cards complement existing accessibility training and support inclusive digital design across state platforms.

Demand for the Quick Cards remains strong. Employees downloaded the cards 3,470 times, and MNIT received 15 requests for more than 300 printed sets from state agencies, legislative offices, and colleges and universities following a September newsletter article. Web versions are available on the OoA Quick Cards webpage, and printed copies are distributed at in-person events such as Global Accessibility Awareness Day.

3,470
Downloads from employees

300+
Printed Quick Card sets requested

9
Updated Quick Cards

Building leaders for change: MNIT’s LEADER competency training initiative

Effective leadership turns change into progress through trust, alignment, and clear communication. To build these capabilities, MNIT launched the LEADER competency training initiative to strengthen leadership across the agency, with more than 400 MNIT leaders participating to date.

The program establishes a consistent, organization-wide leadership competency framework equipping leaders to guide teams through change, modernization, and continuous improvement.

The LEADER program directly supports MNIT’s strategic priorities. It builds leaders’ ability to navigate and communicate change, strengthens collaboration and connectedness across teams, and reinforces transparency through clear expectations and shared leadership practices. By aligning leadership behaviors with agency goals, MNIT is creating a common standard for true leadership.

Led by the Learning and Development team, MNIT launched its first two LEADER competencies — Lead innovation and manage change, and Effectively communicate — in 2025, achieving 99% participation. Senior leaders reinforced these concepts through two in-person workshops, strengthening shared expectations and alignment. Early results show measurable impact: supervisors reported a 15% increase in confidence leading change and a 14% increase in their ability to communicate a clear vision, while 81% rated peer discussions as highly valuable. Built on FranklinCovey curriculum and tailored through an internal needs assessment, the program blends digital learning, facilitated sessions, and real-world application. MNIT will roll out a third competency, Reinforcing trust, in February 2026 to further strengthen leadership capability and service delivery for Minnesotans.

Minnesota legislative update

Employee recognition

Cyber Security Summit Visionary Leadership Award

The 2025 Cyber Security Summit honored Minnesota’s Jodie Monette, Brian Morgan, and Nicole Pruden with Visionary Leadership Awards during the 15th annual Cyber Security Summit in Minneapolis. Presented in October, the award recognized 13 leaders nationwide whose work strengthens security and delivers meaningful impact.

MNIT GIS Specialist honored with Polaris Leadership Award

MNIT GIS Specialist Megan Sisko received the Polaris Leadership Award at this year’s GIS/LIS Conference — one of the most prestigious honors in Minnesota’s geospatial community.

The Polaris Leadership Award celebrates established leaders who bring energy, creativity, and inspiration to the GIS field. Megan’s nomination, supported by colleagues from MnGeo and the broader geospatial community, reflects her far-reaching impact, dedication to collaboration, and the deep respect she’s earned among her peers.

MNIT Annual Awards

As part of MNIT Week, MNIT employees celebrated their efforts to deliver outstanding IT services to Minnesota and the executive branch during the Annual Awards ceremony. The agency’s Employee Recognition Committee recognized honorees and finalists for the Annual Awards.

Length of Service Recognition

As part of MNIT’s commitment to fostering a Connected Culture, the agency launched a special video series in 2025 to celebrate employees reaching key service milestones. The series showcases the depth and diversity of work across MNIT while offering a glimpse into the talented people behind the technology.

Awards

NASCIO

At the 2025 National Association of State Chief Information Officers State IT Recognition Awards, Minnesota received two national awards and was named a finalist for two additional projects, underscoring the state’s leadership in using technology to improve services, expand access, and strengthen public trust. For a full list of NASCIO Award winners and finalists, visit the NASCIO Awards webpage.

 

Award wins

Esri Special Achievement in GIS Award

Minnesota received a 2025 Special Achievement in GIS Award from Esri for the Executive Map Portfolio — an interactive suite of maps developed through a partnership between the Office of Governor Tim Walz and Lieutenant Governor Peggy Flanagan and MNIT’s Geospatial Information Office. The tool helps state leaders visualize key data from the One Minnesota Plan across three areas: climate, children and families, and the economy.

Designed for mobile use, the portfolio supports quick, informed decision-making while promoting public transparency. The project brought together MNIT technologists, policy and communications staff, agency experts, and academic partners.

AI 50

The Center for Public Sector AI named MNIT an inaugural AI 50 winner — a national recognition honoring government leaders and organizations that use artificial intelligence to improve public services.

The award highlights MNIT’s leadership in developing and applying AI responsibly and transparently to enhance accessibility, efficiency, and service delivery for Minnesotans. Through initiatives like TAIGA, MNIT continues to shape ethical AI guidance and deploy practical tools that strengthen outcomes in health, safety, and digital government.

MNIT joins a select group of public agencies, nonprofits, and academic institutions nationwide recognized for advancing innovation while upholding ethical principles in AI use. View the full list of winners on the Center for Public Sector AI website.

Councils and collaborations

Partnerships strengthen and broaden our service to Minnesotans

MNIT values our partnerships because they bring us together with different levels of government and the private sector to achieve common goals that benefit Minnesotans. MNIT’s partnerships maximize the impact of public policies and services. When we combine resources, knowledge, and innovation from diverse groups, we create better opportunities and improve the quality, diversity, and speed of services that we provide Minnesotans. Together, MNIT and its partners address complex issues more effectively than we could on our own.

The Whole-of-State Cybersecurity Plan relies on everyone who works in the public realm — from the front desk workers at police stations to Tribal leaders, and from city mayors to K-12 school officials. While information technology and cybersecurity professionals will be the most deeply engaged, everyone at every level of public service should be aware of the need to take cybersecurity seriously and personally to protect Minnesotans’ data.

Highlights of some of MNIT’s cybersecurity-related partnerships at work in 2025:

Tribal Nations

MNIT continues to build relationships with Tribal Nations and offers tools such as the Statewide Security Monitoring Initiative and Whole-of-State services to strengthen security readiness.

Minnesota National Guard

The National Guard supports MNIT’s plan to mitigate cyber risks statewide. Together, we partner to support local governments in the event of a cyber incident. MNIT and the National Guard plan and coordinate during peacetime so experts can step in quickly during a crisis. Their partnership and expertise proved invaluable during the response to the City of St. Paul’s cyber incident in July. The Minnesota National Guard Cyber Coordination Cell further strengthened statewide readiness by organizing Minnesota’s first Military Cyber Symposium in 2024 at MSU and hosting a second symposium in September 2025. Attendees heard from global, federal, state, and local experts, including MNIT Assistant Commissioner and CISO John Israel. In 2025, the National Guard also partnered with MNIT to guide the state’s risk assessment program through MSU.

County IT collaboration

MNIT convenes monthly meetings with county IT leaders to align priorities, exchange threat information, troubleshoot challenges, and advance opportunities to strengthen cybersecurity and improve service delivery.

Cyber navigators

MNIT’s cyber navigators develop deep relationships with Minnesota’s local governments (including counties, cities, townships, school districts, and Tribal Nations) and lead communication efforts with partner entities interested in or participating in Whole-of-State services. Cyber navigators also collaborate with local governments reporting cyber incidents through the cybersecurity incident reporting law, helping align resources and share threat alerts to strengthen cyber resiliency statewide.

They collaborate with federal, state, and local government partners, including MNIT’s SOC and Minnesota Fusion Center to understand Minnesota’s threat landscape through centralized feeds, dedicated resources, proactive intelligence gathering, processing event data, and extensive collaborative efforts. In addition, they help coordinate resources, threat intelligence, awareness, and responses to emerging cyber threats and active incidents wherever they occur.

Multi-State Information Sharing and Analysis Center Executive Committee

John Israel, Minnesota’s Chief Information Security Officer and MNIT Assistant Commissioner, joined the Multi-State Information Sharing and Analysis Center (MS-ISAC) Executive Committee in February 2025. The committee — made up of state, local, tribal, and territorial representatives — sets strategic direction and advise MS-ISAC to continuously strengthen member cybersecurity services and maturity.

Cybersecurity Task Force and subcommittees

The 2022-2024 Minnesota Cybersecurity Task Force contributed to the implementation of Minnesota’s Whole-of-State Cybersecurity Plan to advance cybersecurity protections for local government entities. Now, the 2024-2026 Task Force continues the momentum, working with MNIT to determine how to best use the $23.5 million from the federal SLCGP and the Minnesota Legislature to boost local entities’ cybersecurity defenses. The 2024-2026 task force members were sworn in during a ceremony in December 2024, and during their first meeting of 2025, they created three subcommittees to focus on critical areas of concern:

• Advanced Cybersecurity Tools and Capabilities: To enhance adoption of advanced cyber defensive tools and capabilities.
• Baseline Cybersecurity Capabilities: To enable and enhance baseline cyber capabilities.
• Critical Infrastructure: To focus on critical infrastructure cyber resiliency.

These subcommittees have been meeting throughout the year. They support the Cybersecurity Task Force through:

• Focused expertise & actionable strategies: Provide recommendations to advance Task Force initiatives.
• Targeted insights on goals: Address specific aspects of goals to deliver in-depth analysis.
• Decision-making support: Guide critical decisions with specialized cybersecurity insights.
• Alignment with key objectives: Ensure strategies align with the Whole-of-State Plan and overarching goals.
• Driving results through exploration: Contribute to objectives by diving deep into critical topics.