SB 1041 Initials FK/JB Page 1 Caucus & COW ARIZONA HOUSE OF REPRESENTATIVES Fifty-sixth Legislature First Regular Session Senate: HHS W/D | APPROP DPA/SE 6-3-1-0 | 3 rd Read 24-4-2-0 House: GOV DP 8-0-1-0 | APPROP DPA 15-0-0-0 SB 1041: cybersecurity software; appropriation Sponsor: Senator Kavanagh, LD 3 Caucus & COW Overview Directs the Arizona Department of Homeland Security (AZDOHS) to acquire and integrate security software into state agencies. Appropriates $2,000,000 from the state GF in FY 2024 for the procurement of this security software. History The AZDOHS formulates policies, plans and programs to enhance the ability of this state to prevent and respond to acts of terrorism, cybersecurity threats and other critical hazards (A.R.S. § 41-4254). AZDOHS has received funding to provide cyber resources to local and tribal government entities in Arizona. These resources are: 1) Anti-Phishing / Security Awareness Training (SAT); 2) Advanced Endpoint Protection (AEP); 3) Converged Endpoint Management (XEM); 4) Multi-Factor Authentication (MFA); and 5) Web Application Firewall (WAF) (AZDOHS). Provisions 1. Mandates AZDOHS acquire an enterprise license for security software that state agencies use for the security of development processes and scans software code in development, production and postproduction. This software must detect and improve security threats in at least two of the following methods: a) static analysis security testing; b) dynamic testing; c) penetration testing; or d) software composition analysis. (Sec. 1) 2. Appropriates $2,000,000 from the state GF in FY 2024 to AZDOHS for the procurement of an enterprise license. (Sec. 2) 3. Specifies this appropriation is exempt from lapsing. (Sec. 2) Amendments Committee on Appropriations 1. Stipulates that a maximum of 500,000 dollars may be used to remediate detected cybersecurity software vulnerabilities. ☐ Prop 105 (45 votes) ☐ Prop 108 (40 votes) ☐ Emergency (40 votes) ☐ Fiscal Note