LCO No. 5995 1 of 3 General Assembly Committee Bill No. 709 January Session, 2019 LCO No. 5995 Referred to Committee on PUBLIC SAFETY AND SECURITY Introduced by: (PS) AN ACT CONCERNING A DIVISION OF CYBERSECURITY WIT HIN THE DEPARTMENT OF EM ERGENCY SERVICES AND PUBLIC PROTECTION. Be it enacted by the Senate and House of Representatives in General Assembly convened: Section 1. Section 29-1b of the general statutes is repealed and the 1 following is substituted in lieu thereof (Effective July 1, 2019): 2 (a) There shall be within the Department of Emergency Services and 3 Public Protection a Division of State Police. The Commissioner of 4 Emergency Services and Public Protection shall serve as administrative 5 head and commanding officer of the State Police Division. As 6 administrative head, said commanding officer of the Division of State 7 Police shall delegate said commanding officer's jurisdiction of the 8 affairs of the Division of State Police to a deputy commissioner who 9 shall have the powers and privileges conferred by statute upon a state 10 policeman. 11 (b) There shall be within said department a Division of Emergency 12 Management and Homeland Security. The commissioner shall serve as 13 administrative head of said division. As administrative head, said 14 Committee Bill No. 709 LCO No. 5995 2 of 3 commissioner shall delegate said commissioner's jurisdiction of the 15 Division of Emergency Management and Homeland Security to a 16 deputy commissioner. The deputy commissioner shall possess 17 professional training and knowledge consisting of not less than five 18 years of managerial or strategic planning experience in matters relating 19 to public safety, security, emergency services and emergency response. 20 No person possessing a record of any criminal, unlawful or unethical 21 conduct shall be eligible for or hold such position. Any person with 22 any present or past political activities or financial interests that may 23 substantially conflict with the duties of the deputy commissioner or 24 expose such person to potential undue influence or compromise such 25 person's ability to be entrusted with necessary state or federal security 26 clearances or information shall be deemed unqualified for such 27 position and shall not be eligible to hold such position. 28 (c) (1) There shall be within said department a Division of 29 Cybersecurity. The commissioner shall serve as administrative head of 30 said division. As administrative head, said commissioner shall 31 delegate said commissioner's jurisdiction of the Division of 32 Cybersecurity to a deputy commissioner. The deputy commissioner 33 shall possess professional training and knowledge consisting of not 34 less than five years of managerial or strategic planning experience in 35 matters relating to cybersecurity. No person possessing a record of any 36 criminal, unlawful or unethical conduct shall be eligible for or hold 37 such position. Any person with any present or past political activities 38 or financial interests that may substantially conflict with the duties of 39 the deputy commissioner or expose such person to potential undue 40 influence or compromise such person's ability to be entrusted with 41 necessary state or federal security clearances or information shall be 42 deemed unqualified for such position and shall not be eligible to hold 43 such position. 44 (2) The division shall (A) oversee and coordinate cybersecurity 45 efforts among state agencies, boards, commissions and other entities, 46 including the constituent units of the state system of higher education 47 Committee Bill No. 709 LCO No. 5995 3 of 3 as defined in section 10a-1, and identify critical information technology 48 infrastructure needs; (B) assist municipalities and other political 49 subdivisions of the state with cybersecurity efforts and coordinate state 50 initiatives with municipalities and other political subdivisions of the 51 state to the maximum extent possible; (C) act as a liaison with federal 52 government agencies, including the United States Department of 53 Homeland Security, and share information with federal, state and local 54 agencies as appropriate; (D) coordinate cybersecurity initiatives with 55 other states and the federal government; (E) collaborate with the 56 private sector to facilitate cybersecurity efforts, including efforts 57 related to corporate espionage, protection of trade secrets and data 58 privacy; and (F) promote personal computer, mobile data and 59 application security for persons throughout the state, including 60 promoting public awareness of cybersecurity issues. 61 This act shall take effect as follows and shall amend the following sections: Section 1 July 1, 2019 29-1b Statement of Purpose: To create a Division of Cybersecurity within the Department of Emergency Services and Public Protection. [Proposed deletions are enclosed in brackets. Proposed additions are indicated by underline, except that when the entire text of a bill or resolution or a section of a bill or resolution is new, it is not underlined.] Co-Sponsors: SEN. HWANG, 28th Dist. S.B. 709