States have typically employed a federated model for cybersecurity, where each public sector organization is responsible for securing its own critical applications. This approach limits a comprehensive statewide perspective on visibility, observability, and risk management. It also hinders government leaders from effectively identifying, prioritizing, and funding risk reduction efforts at a larger scale.

States are moving towards a more holistic security strategy by adopting collective defenses, which involve collaboration between public and private sector organizations. This includes sharing information and resources to address common risks. For instance, the State and Local Cybersecurity Grant Program has allocated $1 billion over four years to support agencies in implementing cybersecurity best practices.

Government agencies often struggle with outdated regulations that slow down procurement processes. Agile procurement is crucial as it allows for quicker access to necessary cybersecurity solutions, which is vital for protecting at-risk systems. The 2022 Total Economic Impact™ study of AWS Marketplace indicates that it can save organizations 66 percent of the time typically spent on procurement, enabling faster deployment of essential defenses against cyber threats.