California Assembly Bill AB650

California 2017-2018 Regular Session

• Introduced: 2/14/17
• Refer: 3/2/17
• Failed: 2/1/18

Caption

Director of Technology: state baseline security controls.

Impact

The implementation of AB 650 would affect state law by providing a structured framework for state agencies to follow regarding information technology security. It prohibits individual agencies from establishing security controls that fall below the designated state baseline security controls. This regulatory oversight is likely to improve information security across state government, reduce risks related to data breaches, and promote efficiency in technology resource management.

Summary

Assembly Bill 650, introduced by Assembly Member Dahle, focuses on enhancing baseline security controls for state technology under the Department of Technology within the Government Operations Agency. The bill mandates that the Director of Technology creates, tailors, and reviews these security controls in accordance with emerging industry standards, particularly those set by the National Institute of Standards and Technology (NIST). This measure aims to ensure that state agencies comply with a uniform set of security protocols, thereby enhancing the state's cybersecurity posture.

Contention

While the bill is primarily aimed at strengthening security protocols, there may be concerns regarding the flexibility of state agencies to adapt these controls based on unique departmental needs. Critics could argue that a one-size-fits-all approach might not adequately address specific requirements of various state entities. The requirement for compliance with state baseline security controls could also introduce additional administrative burdens, particularly for smaller departments with limited resources.