Connecticut 2019 Regular Session

Connecticut Senate Bill SB00709 Compare Versions

Version 1 (Old)

Version 2 (New)

Old	New		Differences
1		-
2		-
3		-	LCO \\PRDFS1\SCOUSERS\FORZANOF\WS\2019SB-00709-R02-
4		-	SB.docx
5		-	1 of 4
6		-
7		-	General Assembly Substitute Bill No. 709
8		-	January Session, 2019
9	1
10	2
11	3
	4	+	LCO No. 5995 1 of 3
	5	+
	6	+	General Assembly Committee Bill No. 709
	7	+	January Session, 2019
	8	+	LCO No. 5995
12	9
13	10
14		-	AN ACT ESTABLISHING A TASK FORCE TO STUD Y
15		-	CYBERSECURITY.
	11	+	Referred to Committee on PUBLIC SAFETY AND SECURITY
	12	+
	13	+
	14	+	Introduced by:
	15	+	(PS)
	16	+
	17	+
	18	+
	19	+	AN ACT CONCERNING A DIVISION OF CYBERSECURITY WIT HIN
	20	+	THE DEPARTMENT OF EM ERGENCY SERVICES AND PUBLIC
	21	+	PROTECTION.
16	22		Be it enacted by the Senate and House of Representatives in General
17	23		Assembly convened:
18	24
19		-	Section 1. (Effective from passage) (a) There is established a task force 1
20		-	to study cybersecurity. The task force shall develop a strategic plan 2
21		-	that includes findings and recommendations on: 3
22		-	(1) Establishing a structure for oversight and coordination of 4
23		-	cybersecurity efforts among state agencies, boards, commissions and 5
24		-	other entities, including the constituent units of the state system of 6
25		-	higher education as defined in section 10a-1 of the general statutes; 7
26		-	(2) Critical information technology infrastructure needs; 8
27		-	(3) Maximizing state coordination with and assistance to 9
28		-	municipalities and other political subdivisions of the state on 10
29		-	cybersecurity efforts, and maximizing coordination and assistance 11
30		-	among municipalities and other political subdivisions of the state; 12
31		-	(4) Maximizing interaction and coordination with federal 13
32		-	government agencies, including the United States Department of 14
33		-	Homeland Security; 15
34		-	(5) Appropriate information sharing between federal, state and local 16 Substitute Bill No. 709
	25	+	Section 1. Section 29-1b of the general statutes is repealed and the 1
	26	+	following is substituted in lieu thereof (Effective July 1, 2019): 2
	27	+	(a) There shall be within the Department of Emergency Services and 3
	28	+	Public Protection a Division of State Police. The Commissioner of 4
	29	+	Emergency Services and Public Protection shall serve as administrative 5
	30	+	head and commanding officer of the State Police Division. As 6
	31	+	administrative head, said commanding officer of the Division of State 7
	32	+	Police shall delegate said commanding officer's jurisdiction of the 8
	33	+	affairs of the Division of State Police to a deputy commissioner who 9
	34	+	shall have the powers and privileges conferred by statute upon a state 10
	35	+	policeman. 11
	36	+	(b) There shall be within said department a Division of Emergency 12
	37	+	Management and Homeland Security. The commissioner shall serve as 13
	38	+	administrative head of said division. As administrative head, said 14
	39	+	Committee Bill No. 709
35	40
36	41
37		-	LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2019SB-00709-
38		-	R02-SB.docx }
39		-	2 of 4
	42	+	LCO No. 5995 2 of 3
40	43
41		-	agencies; 17
42		-	(6) Coordination of cybersecurity initiatives with other states and 18
43		-	the federal government; 19
44		-	(7) Collaboration with the private sector to facilitate cybersecurity 20
45		-	efforts, including efforts related to corporate espionage, protection of 21
46		-	trade secrets and data privacy; and 22
47		-	(8) Promoting personal computer, mobile data and application 23
48		-	security for persons throughout the state, including promoting public 24
49		-	awareness of cybersecurity issues. 25
50		-	(b) The task force shall consist of the following members: 26
51		-	(1) Two appointed by the speaker of the House of Representatives, 27
52		-	one of whom has expertise in cybersecurity in the financial, defense, 28
53		-	public utility or health care industry; 29
54		-	(2) Two appointed by the president pro tempore of the Senate, one 30
55		-	of whom has expertise in cybersecurity investigations as a member of a 31
56		-	law enforcement unit; 32
57		-	(3) One appointed by the majority leader of the House of 33
58		-	Representatives, who represents a municipality having a population of 34
59		-	less than sixty thousand persons and has expertise in municipal 35
60		-	cybersecurity issues; 36
61		-	(4) One appointed by the majority leader of the Senate, who 37
62		-	represents a municipality having a population of sixty thousand or 38
63		-	more persons and who has expertise in municipal cybersecurity issues; 39
64		-	(5) One appointed by the minority leader of the House of 40
65		-	Representatives; 41
66		-	(6) One appointed by the minority leader of the Senate; 42
67		-	(7) The Commissioner of Emergency Services and Public Protection, 43 Substitute Bill No. 709
	44	+	commissioner shall delegate said commissioner's jurisdiction of the 15
	45	+	Division of Emergency Management and Homeland Security to a 16
	46	+	deputy commissioner. The deputy commissioner shall possess 17
	47	+	professional training and knowledge consisting of not less than five 18
	48	+	years of managerial or strategic planning experience in matters relating 19
	49	+	to public safety, security, emergency services and emergency response. 20
	50	+	No person possessing a record of any criminal, unlawful or unethical 21
	51	+	conduct shall be eligible for or hold such position. Any person with 22
	52	+	any present or past political activities or financial interests that may 23
	53	+	substantially conflict with the duties of the deputy commissioner or 24
	54	+	expose such person to potential undue influence or compromise such 25
	55	+	person's ability to be entrusted with necessary state or federal security 26
	56	+	clearances or information shall be deemed unqualified for such 27
	57	+	position and shall not be eligible to hold such position. 28
	58	+	(c) (1) There shall be within said department a Division of 29
	59	+	Cybersecurity. The commissioner shall serve as administrative head of 30
	60	+	said division. As administrative head, said commissioner shall 31
	61	+	delegate said commissioner's jurisdiction of the Division of 32
	62	+	Cybersecurity to a deputy commissioner. The deputy commissioner 33
	63	+	shall possess professional training and knowledge consisting of not 34
	64	+	less than five years of managerial or strategic planning experience in 35
	65	+	matters relating to cybersecurity. No person possessing a record of any 36
	66	+	criminal, unlawful or unethical conduct shall be eligible for or hold 37
	67	+	such position. Any person with any present or past political activities 38
	68	+	or financial interests that may substantially conflict with the duties of 39
	69	+	the deputy commissioner or expose such person to potential undue 40
	70	+	influence or compromise such person's ability to be entrusted with 41
	71	+	necessary state or federal security clearances or information shall be 42
	72	+	deemed unqualified for such position and shall not be eligible to hold 43
	73	+	such position. 44
	74	+	(2) The division shall (A) oversee and coordinate cybersecurity 45
	75	+	efforts among state agencies, boards, commissions and other entities, 46
	76	+	including the constituent units of the state system of higher education 47
	77	+	Committee Bill No. 709
68	78
69	79
70		-	LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2019SB-00709-
71		-	R02-SB.docx }
72		-	3 of 4
	80	+	LCO No. 5995 3 of 3
73	81
74		-	or the commissioner's designee; 44
75		-	(8) The Commissioner of Administrative Services, or the 45
76		-	commissioner's designee; 46
77		-	(9) The Commissioner of Economic and Community Development, 47
78		-	or the commissioner's designee; and 48
79		-	(10) Three persons appointed by the Governor. 49
80		-	(c) Any member of the task force appointed under subdivision (1), 50
81		-	(2), (3), (4), (5) or (6) of subsection (b) of this section may be a member 51
82		-	of the General Assembly. 52
83		-	(d) All appointments to the task force shall be made not later than 53
84		-	thirty days after the effective date of this section. Any vacancy shall be 54
85		-	filled by the appointing authority. 55
86		-	(e) The speaker of the House of Representatives and the president 56
87		-	pro tempore of the Senate shall select the chairpersons of the task force 57
88		-	from among the members of the task force. Such chairpersons shall 58
89		-	schedule the first meeting of the task force, which shall be held not 59
90		-	later than sixty days after the effective date of this section. 60
91		-	(f) The task force may consult with any individual or organization 61
92		-	as the chairpersons deem appropriate. 62
93		-	(g) The administrative staff of the joint standing committee of the 63
94		-	General Assembly having cognizance of matters relating to public 64
95		-	safety and security shall serve as administrative staff of the task force. 65
96		-	(h) Not later than January 15, 2020, the task force shall submit a 66
97		-	report on its findings and recommendations to the joint standing 67
98		-	committee of the General Assembly having cognizance of matters 68
99		-	relating to public safety and security, in accordance with the 69
100		-	provisions of section 11-4a of the general statutes. The task force shall 70
101		-	terminate on the date that it submits such report or January 15, 2020, 71 Substitute Bill No. 709
102		-
103		-
104		-	LCO {\\PRDFS1\SCOUSERS\FORZANOF\WS\2019SB-00709-
105		-	R02-SB.docx }
106		-	4 of 4
107		-
108		-	whichever is later. 72
	82	+	as defined in section 10a-1, and identify critical information technology 48
	83	+	infrastructure needs; (B) assist municipalities and other political 49
	84	+	subdivisions of the state with cybersecurity efforts and coordinate state 50
	85	+	initiatives with municipalities and other political subdivisions of the 51
	86	+	state to the maximum extent possible; (C) act as a liaison with federal 52
	87	+	government agencies, including the United States Department of 53
	88	+	Homeland Security, and share information with federal, state and local 54
	89	+	agencies as appropriate; (D) coordinate cybersecurity initiatives with 55
	90	+	other states and the federal government; (E) collaborate with the 56
	91	+	private sector to facilitate cybersecurity efforts, including efforts 57
	92	+	related to corporate espionage, protection of trade secrets and data 58
	93	+	privacy; and (F) promote personal computer, mobile data and 59
	94	+	application security for persons throughout the state, including 60
	95	+	promoting public awareness of cybersecurity issues. 61
109	96		This act shall take effect as follows and shall amend the following
110	97		sections:
111	98
112		-	Section 1 ~~from passage New section~~
	99	+	Section 1 July 1, 2019 29-1b
113	100
114		-	PS Joint Favorable Subst.
	101	+	Statement of Purpose:
	102	+	To create a Division of Cybersecurity within the Department of
	103	+	Emergency Services and Public Protection.
	104	+	[Proposed deletions are enclosed in brackets. Proposed additions are indicated by underline,
	105	+	except that when the entire text of a bill or resolution or a section of a bill or resolution is new, it is
	106	+	not underlined.]
	107	+
	108	+	Co-Sponsors: SEN. HWANG, 28th Dist.
	109	+
	110	+	S.B. 709
	111	+
115	112