In a recent meeting of the Joint Committee on Information Management and Technology, the Oregon Department of Justice (DOJ) highlighted significant advancements in its data security measures, emphasizing the importance of safeguarding sensitive information in an increasingly digital world. The DOJ's commitment to security is evident through its collaboration with various statewide workgroups and regular meetings with counterparts at the state's Chief Security Officer (CSS) and Enterprise Information Services (EIS).

The DOJ reported a remarkable 1,100% increase in website traffic, surging from 2.7 million visits in 2023 to over 35 million in the past year. This spike reflects a growing reliance on digital resources, necessitating robust security protocols. The department has also seen a 70% increase in open cases within its internal e-discovery system, indicating a rising demand for its services.

Security threats have escalated, with the DOJ blocking nearly 50,000 phishing attempts in the last year alone, a 220% increase from the previous year. The department's defense-in-depth strategy has proven effective, resulting in a staggering 99.7% decrease in malware incidents, from over 13,000 to just 42. This proactive approach has significantly reduced the risk of successful cyberattacks reaching end-user devices.

The DOJ's child support system, Origin, has also experienced growth, serving 10% more families and managing over 5 billion records in its data warehouse. This increase underscores the department's ongoing efforts to enhance its services while maintaining stringent security measures.

As the DOJ prepares for future challenges, it is investing in training and resources to improve its security posture further. The department's leadership reiterated the necessity of these investments, stating, "It's not if, but when" a security incident will occur, highlighting the critical nature of ongoing vigilance in protecting public data.

The discussions from this meeting reflect the DOJ's dedication to not only meeting but exceeding security standards, ensuring that the sensitive information of Oregonians remains protected in an ever-evolving digital landscape.