But in its 20th year, the latest list reflects a shift that has been steadily building in the background. Based on responses from 51 state and territory chief information officers, the 2026 State CIO Top 10 Priorities shows CIOs elevating artificial intelligence above all other priorities for the first time — bringing an end to cybersecurity’s 12-year run at the top.
The change highlights how, in just one year, AI in state government has evolved from an emerging technology into an operational practicality. And as 2026 approaches, CIOs are sharpening their focus on governance, ethical use, workforce readiness, data quality, privacy and security.
Cybersecurity now ranks second, and although it has been displaced from the top spot, its importance remains unchanged. CIOs are still focused on strengthening security frameworks, protecting data, expanding training and awareness efforts, addressing insider threats, managing third-party risk, and advancing whole-of-state cybersecurity strategies, according to the report.
Changes across the rest of the top 10 reinforce a broader recalibration of priorities. Budget, cost control and fiscal management climbed to third place in 2026, up from sixth the year before, signaling increased attention to financial sustainability. Modernization followed at No. 4, while digital government and digital services slipped to fifth after ranking third in 2025.
NASCIO’s 2026 State CIO Top 10 Priorities
- Artificial Intelligence
- Cybersecurity and Risk Management
- Budget/Cost Control/Fiscal Management
- Modernization
- Digital Government/Digital Services
- Accessibility
- Identity and Access Management
- Data Management and Analytics
- Consolidation/Optimization
- Cloud Services
Accessibility continued its upward momentum as well. After making its first appearance on the list last year, it jumped four spots in 2026, pointing to a wider recognition and, perhaps, regulatory pressure around embedding accessibility into how states design services, procure technology and communicate with residents.
A “final rule” by the U.S. Department of Justice in 2024 requires governments serving populations of at least 50,000 people to meet Web Content Accessibility Guidelines 2.1 Level AA standards and, generally, make web and mobile content accessible to users with disabilities.
Other shifts were quieter but no less telling. Data management and analytics fell to eighth, down from fourth, while consolidation returned to the list after a two-year absence — an indication that enterprise thinking and shared services are regaining attention as states look for efficiencies across agencies.
Ultimately, the 2026 priorities reflect a year of adjustment rather than upheaval. Longstanding concerns remain in place, but the re-ordering tells a story about where state CIOs believe the most immediate work is — balancing new capabilities like AI with the operational, fiscal and security realities that continue to drive government needs.
