California 2017 2017-2018 Regular Session

California Assembly Bill AB1359 Introduced / Bill

Filed 02/17/2017

                    CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION Assembly Bill No. 1359Introduced by Assembly Member ChauFebruary 17, 2017 An act relating to information security. LEGISLATIVE COUNSEL'S DIGESTAB 1359, as introduced, Chau. California Cybersecurity Integration Center.The California Emergency Services Act sets forth the duties of the Office of Emergency Services with respect to specified emergency preparedness, mitigation, and response activities within the state. By executive order in 2015, the Governor directed the Office of Emergency Services to establish and lead the California Cybersecurity Integration Center (CalSIC) with the primary mission to reduce the likelihood and severity of cyber incidents that could damage Californias economy, its critical infrastructure, or public and private sector computer networks in the state.This bill would state the intent of the Legislature to enact subsequent legislation that would require certain companies to confidentially report cyberattacks to CalSIC, and would impose certain duties on CalSIC with respect to the information submitted.Digest Key Vote: MAJORITY  Appropriation: NO  Fiscal Committee: NO  Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. It is the intent of the Legislature to enact legislation that would require companies with critical infrastructure assets that are located in California to confidentially report cyberattacks against those assets to the California Cybersecurity Integration Center (CalSIC) under the Office of Emergency Services, and would further require CalSIC to ensure the information so submitted is stored anonymously so that the intelligence value of the threat information can be made available to other companies within the same sector in a manner that does not identify the company that reported the information. 

 CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION Assembly Bill No. 1359Introduced by Assembly Member ChauFebruary 17, 2017 An act relating to information security. LEGISLATIVE COUNSEL'S DIGESTAB 1359, as introduced, Chau. California Cybersecurity Integration Center.The California Emergency Services Act sets forth the duties of the Office of Emergency Services with respect to specified emergency preparedness, mitigation, and response activities within the state. By executive order in 2015, the Governor directed the Office of Emergency Services to establish and lead the California Cybersecurity Integration Center (CalSIC) with the primary mission to reduce the likelihood and severity of cyber incidents that could damage Californias economy, its critical infrastructure, or public and private sector computer networks in the state.This bill would state the intent of the Legislature to enact subsequent legislation that would require certain companies to confidentially report cyberattacks to CalSIC, and would impose certain duties on CalSIC with respect to the information submitted.Digest Key Vote: MAJORITY  Appropriation: NO  Fiscal Committee: NO  Local Program: NO 





 CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION

Assembly Bill No. 1359

Introduced by Assembly Member ChauFebruary 17, 2017

Introduced by Assembly Member Chau
February 17, 2017

 An act relating to information security. 

LEGISLATIVE COUNSEL'S DIGEST

## LEGISLATIVE COUNSEL'S DIGEST

AB 1359, as introduced, Chau. California Cybersecurity Integration Center.

The California Emergency Services Act sets forth the duties of the Office of Emergency Services with respect to specified emergency preparedness, mitigation, and response activities within the state. By executive order in 2015, the Governor directed the Office of Emergency Services to establish and lead the California Cybersecurity Integration Center (CalSIC) with the primary mission to reduce the likelihood and severity of cyber incidents that could damage Californias economy, its critical infrastructure, or public and private sector computer networks in the state.This bill would state the intent of the Legislature to enact subsequent legislation that would require certain companies to confidentially report cyberattacks to CalSIC, and would impose certain duties on CalSIC with respect to the information submitted.

The California Emergency Services Act sets forth the duties of the Office of Emergency Services with respect to specified emergency preparedness, mitigation, and response activities within the state. By executive order in 2015, the Governor directed the Office of Emergency Services to establish and lead the California Cybersecurity Integration Center (CalSIC) with the primary mission to reduce the likelihood and severity of cyber incidents that could damage Californias economy, its critical infrastructure, or public and private sector computer networks in the state.

This bill would state the intent of the Legislature to enact subsequent legislation that would require certain companies to confidentially report cyberattacks to CalSIC, and would impose certain duties on CalSIC with respect to the information submitted.

## Digest Key

## Bill Text

The people of the State of California do enact as follows:SECTION 1. It is the intent of the Legislature to enact legislation that would require companies with critical infrastructure assets that are located in California to confidentially report cyberattacks against those assets to the California Cybersecurity Integration Center (CalSIC) under the Office of Emergency Services, and would further require CalSIC to ensure the information so submitted is stored anonymously so that the intelligence value of the threat information can be made available to other companies within the same sector in a manner that does not identify the company that reported the information. 

The people of the State of California do enact as follows:

## The people of the State of California do enact as follows:

SECTION 1. It is the intent of the Legislature to enact legislation that would require companies with critical infrastructure assets that are located in California to confidentially report cyberattacks against those assets to the California Cybersecurity Integration Center (CalSIC) under the Office of Emergency Services, and would further require CalSIC to ensure the information so submitted is stored anonymously so that the intelligence value of the threat information can be made available to other companies within the same sector in a manner that does not identify the company that reported the information. 

SECTION 1. It is the intent of the Legislature to enact legislation that would require companies with critical infrastructure assets that are located in California to confidentially report cyberattacks against those assets to the California Cybersecurity Integration Center (CalSIC) under the Office of Emergency Services, and would further require CalSIC to ensure the information so submitted is stored anonymously so that the intelligence value of the threat information can be made available to other companies within the same sector in a manner that does not identify the company that reported the information. 

SECTION 1. It is the intent of the Legislature to enact legislation that would require companies with critical infrastructure assets that are located in California to confidentially report cyberattacks against those assets to the California Cybersecurity Integration Center (CalSIC) under the Office of Emergency Services, and would further require CalSIC to ensure the information so submitted is stored anonymously so that the intelligence value of the threat information can be made available to other companies within the same sector in a manner that does not identify the company that reported the information. 

### SECTION 1.