Subbarao Mupparaju
Perspective · Public-Sector Technology

Cybersecurity as Public Trust

Subbarao Mupparaju, Director of FI$Cal, on why security for a government system is less a technical checklist than a question of public trust — and what that reframing changes about how the systems are built.

A different standard than the private sector

Private organisations secure their systems to protect their business. Government must secure its systems to protect the public’s confidence in government itself. A breach of a state system is not only an operational failure; it is an erosion of the trust that allows public institutions to function. That reframing changes how you prioritise: security stops being the thing you bolt on at the end and becomes a first-order design consideration.

What durable security actually takes

Over more than three decades across the private and public technology sectors, Subbarao Mupparaju has seen that durable security rarely comes from any single tool or purchase. It comes from a few less glamorous commitments: building security into a system from the foundation rather than adding it under pressure later; assuming the long game, since threats evolve continuously; and making it everyone’s responsibility, because the strongest technical controls are undermined by weak habits.

For a system that holds a state’s financial data — as FI$Cal does — the cost of getting it wrong is measured in public confidence, which is why resilience and protection are considered from the beginning.

Invisible when it works

The people of California do not need to think about how their state’s financial data is protected — and that is exactly the outcome the work aims for. Invisible, dependable security is the goal. When it holds, no one notices; that quiet reliability is the real measure of success.

In government, the cost of getting security wrong is measured in public confidence — so trust is the real deliverable.

Read more