The National Association of State CIOs and Deloitte outlined five calls to action in a recent survey of state chief information security officers.