Calhfa Audit & Risk Management Committee Meeting
The Audit & Risk Management Committee meeting featured a presentation from the Chief Information Officer regarding the annual information security update, covering progress and posture through December 2025. Key discussion points included business execution achievements across data protection, regulatory compliance, customer trust, and technology recovery domains, noting the successful onboarding of a Security Information and Events Management (SIEM) system and Security Operations Center (SOC). The material risk profile remained stable with no information security incidents on core systems in 2025. Discussions also covered external factors such as ransomware threats, the rollout of AI tools like Co-pilot, and the successful completion of a check-in audit. The committee reviewed the agency's cybersecurity maturity scores, which exceeded state benchmarks, and discussed the continuous nature of security enhancements needed to address evolving threats.