An official website of the State of Texas
Cybersecurity Transition: House Bill 150 (89R) transferred Department of Information Resource's (DIR's) cybersecurity functions to the Texas Cyber Command (TXCC). Learn more
Operations

Three operational components

The Texas Cyber Command carries out its statutory mission under Government Code Chapter 2063 through three operational components. Each is being stood up in phases as the agency builds out.

How it’s organized

Intelligence, information sharing, and coordinated operations

Cybersecurity Threat Intelligence Center (CTIC)

The Command’s intelligence hub, administered under Government Code §2063.201. The CTIC gathers, analyzes, and disseminates cyber threat intelligence to state, local, and federal partners, building knowledge of who is targeting Texas and how, to drive how the state secures, protects, and defends its networks.

Stand-up in progress

Texas Information Sharing and Analysis Organization (TX-ISAO)

The state’s clearinghouse for cybersecurity information. The TX-ISAO shares intelligence and analysis with governmental entities, federal agencies, and covered entities, distributing CTIC insights to partners and teammates across Texas.

Stand-up in progress

Unified Cyber Task Force (UCTF)

The Command’s operational arm for securing, defending, and recovering Texas networks. The UCTF unites three capabilities under one coordinated structure:

Network Security Operations Center (NSOC)

24/7 network monitoring, vulnerability scanning, penetration testing, security assessments, and AI-enabled defense for state networks.

Cybersecurity Incident Response Unit (CIRU)

Direct support to state agencies and covered entities under attack, containing damage and restoring services with federal, state, and local partners.

Digital Forensics Laboratory (DFL)

Administered under Government Code §2063.203. Preserves evidence, uncovers attacker tradecraft, and supports attribution and deterrence.

Stand-up in progress