Connecticut Limits Security Tool Sprawl
For Meltser, the first pivot is cultural. Stop centering the discussion on tools, he told conferencegoers, and start centering it on risk and results.
“One of the ways to build momentum with your team is to measure the actual risk and redundancies, not only in systems but in people as well,” he said.
For government IT leaders, this means invest where it reduces risk you can quantify and sustain.
Meltser framed the technology pivot as enabling people to do higher-value work at scale. New platforms and “new ways of working” should amplify the state’s existing teams, not drown them in dashboards. That means consolidating where possible, standardizing telemetry and automating repetitive triage so scarce analysts can focus on playbooks and threat engineering.
State IT Agency Seeks Meaningful Automation
Asked for practical examples, Meltser emphasized gains in incident response speed. Connecticut’s security operations have seen investigations shrink “from days to hours or less,” he said — a shift he attributes to carefully targeted automation that accelerates the work without creating new maintenance burdens. That improvement is critical as the state “scales our operations and supports all agencies.”
The qualifier — “meaningful automation” — is deliberate. Meltser cautioned against chasing novelty that doesn’t reduce risk. The point is not to sprinkle AI everywhere; it’s to plug automation into specific choke points such as alert deduplication, initial context-gathering and routing so analysts get to a correct decision faster and with less fatigue.
READ MORE: Cloud and artificial intelligence are government productivity drivers.
IT Operations Benefit from Unification and Scaling
As CISO, Meltser plays a central role in setting Connecticut’s overall cybersecurity direction, especially for the executive branch. State strategy documents describe a model where Connecticut aims to run cybersecurity as a unified enterprise program, with the CISO responsible for designing and implementing a statewide cybersecurity program and building an enterprise approach that can scale across agencies.
In practice, Connecticut is pursuing platforms that collapse overlapping tools and normalize data flows across agencies and municipal partners.
Meltser described introducing “platforms and tools from our office to scale with maximum efficiency” and to reduce lingering risks that slow teams down. The target is fewer seams, clearer accountability and faster time to action.
His enthusiasm for AI is pragmatic: Defenders finally have a chance to leverage scale the way attackers do. He’s excited by “performing actions and acting on events meaningfully with a central SOC,” provided those actions are measurable and repeatable.
For a state that must protect everything from citizen records to critical infrastructure, “platform and scale” beats one-off scripts and boutique tools.
DIVE DEEPER: Governments should test platforms, not projects.
CISO Advises on Best Practices for Simplifying Security
Meltser’s insights reflect some best practices that empower states to simplify the stack, scale the team and prove risk reduction with numbers. Among his recommendations:
- Make “risk, not tools” the mantra. Recast leadership briefings around exposure, coverage, mean-time metrics and recovery. It’s the fastest way to align funding and measure progress.
- Collapse overlap and normalize telemetry. Inventory duplicative capabilities, then standardize data into a platform the SOC actually uses. The return is less noise, fewer false positives and faster handoffs.
- Automate where it matters. Start with triage and enrichment to cut “days to hours.” Track the delta and feed wins back to budget and HR conversations.
- Design for statewide scale. Choose platforms that extend across agencies and municipal partners, write shared playbooks and set auditable service levels.
- Build human redundancy. Plan rotations, cross-training and surge capacity so your best people aren’t single points of failure.
By unifying platforms and applying targeted, “meaningful” automation, Connecticut reports investigations that once took days are now completed in hours — leaving the SOC to spend its time on work only humans can do.
