More state, local and educational entities should follow cybersecurity frameworks and ensure all staff participate in regular cybersecurity awareness training, the performance audit advised. Plus, the state legislative branch needs to develop both short-term and long-term cyber plans.