The incident, which cost the state $10 million, led it to adopt a network-monitoring platform that controls which devices can log on.

Two years ago, the state didn't know what was on its network. Now, state CISO Phil Bates says it's automating security processes on a well-managed inventory.