CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION Assembly Bill No. 1359Introduced by Assembly Member ChauFebruary 17, 2017 An act relating to information security. LEGISLATIVE COUNSEL'S DIGESTAB 1359, as introduced, Chau. California Cybersecurity Integration Center.The California Emergency Services Act sets forth the duties of the Office of Emergency Services with respect to specified emergency preparedness, mitigation, and response activities within the state. By executive order in 2015, the Governor directed the Office of Emergency Services to establish and lead the California Cybersecurity Integration Center (CalSIC) with the primary mission to reduce the likelihood and severity of cyber incidents that could damage Californias economy, its critical infrastructure, or public and private sector computer networks in the state.This bill would state the intent of the Legislature to enact subsequent legislation that would require certain companies to confidentially report cyberattacks to CalSIC, and would impose certain duties on CalSIC with respect to the information submitted.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. It is the intent of the Legislature to enact legislation that would require companies with critical infrastructure assets that are located in California to confidentially report cyberattacks against those assets to the California Cybersecurity Integration Center (CalSIC) under the Office of Emergency Services, and would further require CalSIC to ensure the information so submitted is stored anonymously so that the intelligence value of the threat information can be made available to other companies within the same sector in a manner that does not identify the company that reported the information. CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION Assembly Bill No. 1359Introduced by Assembly Member ChauFebruary 17, 2017 An act relating to information security. LEGISLATIVE COUNSEL'S DIGESTAB 1359, as introduced, Chau. California Cybersecurity Integration Center.The California Emergency Services Act sets forth the duties of the Office of Emergency Services with respect to specified emergency preparedness, mitigation, and response activities within the state. By executive order in 2015, the Governor directed the Office of Emergency Services to establish and lead the California Cybersecurity Integration Center (CalSIC) with the primary mission to reduce the likelihood and severity of cyber incidents that could damage Californias economy, its critical infrastructure, or public and private sector computer networks in the state.This bill would state the intent of the Legislature to enact subsequent legislation that would require certain companies to confidentially report cyberattacks to CalSIC, and would impose certain duties on CalSIC with respect to the information submitted.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: NO Local Program: NO CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION Assembly Bill No. 1359 Introduced by Assembly Member ChauFebruary 17, 2017 Introduced by Assembly Member Chau February 17, 2017 An act relating to information security. LEGISLATIVE COUNSEL'S DIGEST ## LEGISLATIVE COUNSEL'S DIGEST AB 1359, as introduced, Chau. California Cybersecurity Integration Center. The California Emergency Services Act sets forth the duties of the Office of Emergency Services with respect to specified emergency preparedness, mitigation, and response activities within the state. By executive order in 2015, the Governor directed the Office of Emergency Services to establish and lead the California Cybersecurity Integration Center (CalSIC) with the primary mission to reduce the likelihood and severity of cyber incidents that could damage Californias economy, its critical infrastructure, or public and private sector computer networks in the state.This bill would state the intent of the Legislature to enact subsequent legislation that would require certain companies to confidentially report cyberattacks to CalSIC, and would impose certain duties on CalSIC with respect to the information submitted. The California Emergency Services Act sets forth the duties of the Office of Emergency Services with respect to specified emergency preparedness, mitigation, and response activities within the state. By executive order in 2015, the Governor directed the Office of Emergency Services to establish and lead the California Cybersecurity Integration Center (CalSIC) with the primary mission to reduce the likelihood and severity of cyber incidents that could damage Californias economy, its critical infrastructure, or public and private sector computer networks in the state. This bill would state the intent of the Legislature to enact subsequent legislation that would require certain companies to confidentially report cyberattacks to CalSIC, and would impose certain duties on CalSIC with respect to the information submitted. ## Digest Key ## Bill Text The people of the State of California do enact as follows:SECTION 1. It is the intent of the Legislature to enact legislation that would require companies with critical infrastructure assets that are located in California to confidentially report cyberattacks against those assets to the California Cybersecurity Integration Center (CalSIC) under the Office of Emergency Services, and would further require CalSIC to ensure the information so submitted is stored anonymously so that the intelligence value of the threat information can be made available to other companies within the same sector in a manner that does not identify the company that reported the information. The people of the State of California do enact as follows: ## The people of the State of California do enact as follows: SECTION 1. It is the intent of the Legislature to enact legislation that would require companies with critical infrastructure assets that are located in California to confidentially report cyberattacks against those assets to the California Cybersecurity Integration Center (CalSIC) under the Office of Emergency Services, and would further require CalSIC to ensure the information so submitted is stored anonymously so that the intelligence value of the threat information can be made available to other companies within the same sector in a manner that does not identify the company that reported the information. SECTION 1. It is the intent of the Legislature to enact legislation that would require companies with critical infrastructure assets that are located in California to confidentially report cyberattacks against those assets to the California Cybersecurity Integration Center (CalSIC) under the Office of Emergency Services, and would further require CalSIC to ensure the information so submitted is stored anonymously so that the intelligence value of the threat information can be made available to other companies within the same sector in a manner that does not identify the company that reported the information. SECTION 1. It is the intent of the Legislature to enact legislation that would require companies with critical infrastructure assets that are located in California to confidentially report cyberattacks against those assets to the California Cybersecurity Integration Center (CalSIC) under the Office of Emergency Services, and would further require CalSIC to ensure the information so submitted is stored anonymously so that the intelligence value of the threat information can be made available to other companies within the same sector in a manner that does not identify the company that reported the information. ### SECTION 1.