California 2021-2022 Regular Session

California Assembly Bill AB581

Introduced
2/11/21  
Introduced
2/11/21  
Refer
2/18/21  
Refer
2/18/21  
Report Pass
3/26/21  
Report Pass
3/26/21  
Refer
3/26/21  
Refer
3/26/21  
Report Pass
4/8/21  
Report Pass
4/8/21  
Refer
4/8/21  
Refer
4/8/21  
Report Pass
4/29/21  
Refer
4/29/21  
Refer
4/29/21  
Refer
5/12/21  
Refer
5/12/21  
Report Pass
1/20/22  
Report Pass
1/20/22  
Engrossed
1/31/22  
Engrossed
1/31/22  
Refer
2/1/22  
Refer
2/1/22  
Refer
5/4/22  
Refer
5/4/22  
Report Pass
6/8/22  
Report Pass
6/8/22  
Refer
6/8/22  
Refer
6/8/22  
Report Pass
6/15/22  
Report Pass
6/15/22  
Refer
6/15/22  
Refer
6/15/22  
Report Pass
6/20/22  
Report Pass
6/20/22  
Refer
6/20/22  
Refer
6/27/22  

Caption

Cybersecurity.

Impact

The implementation of AB581 will notably affect how state agencies handle cybersecurity protocols. Specifically, the bill necessitates that agencies modify their existing structures to align with federal guidelines, facilitating better reporting, coordination, and resolution of security vulnerabilities. Furthermore, the Chief of the Office of Information Security is tasked with creating, updating, and publishing appropriate procedures to ensure these measures are effectively applied. This will likely lead to a more harmonized approach to cybersecurity across state entities.

Summary

Assembly Bill 581, introduced by Assembly Member Irwin, focuses on strengthening cybersecurity measures across California's state agencies. The bill mandates that all state agencies review and implement the guidelines issued by the National Institute of Standards and Technology (NIST) concerning information security vulnerabilities. By requiring compliance with these guidelines by July 1, 2023, AB581 aims to enhance the state's ability to manage vulnerabilities and protect sensitive information associated with state systems and operations.

Sentiment

The sentiment surrounding AB581 has been generally positive among legislators emphasizing the importance of cybersecurity in the wake of increasing digital threats. Advocates argue that standardizing cybersecurity measures will bolster the protection of public data and resources. However, some concerns have been raised regarding the feasibility and costs associated with the rapid implementation of these guidelines, particularly for smaller agencies with limited resources.

Contention

While AB581 is intended to enhance the security framework of California's state agencies, there are points of contention regarding its execution. Questions have been raised about the timeline for compliance and whether state agencies have the necessary resources and infrastructure to implement the standards. There is also concern about the responsibility placed on individual agencies to independently address cybersecurity vulnerabilities without additional support or funding from the state.

Companion Bills

No companion bills found.

Similar Bills

CA AB869

State agencies: information security: Zero Trust architecture.

CA AB749

State agencies: information security: uniform standards.

CA SB896

Generative Artificial Intelligence Accountability Act.

CA SB767

Educational technology: Digital Education Equity Program: regional consortia: State Digital Equity Plan.

MS HB1380

Cybersecurity; governmental and certain commercial entities substantially complying with standards not liable for incidents relating to.

TX HB8

Relating to cybersecurity for state agency information resources.

CA AB1306

California Cybersecurity Integration Center.

CA AB2477

Emergency alert and warning service providers: minimum operating standards.