What should a state entity do when a security incident occurs?

Immediately report the incident through the California Compliance and Security Incident Reporting System (Cal-CSIRS). Cal-CSIRS will require specific information about the incident and will notify the Office of Information Security and the the California Highway Patrol’s Computer Crimes Investigation Unit (CCIU).