Hawaii 2022 Regular Session

Hawaii Senate Bill SB3086 Compare Versions

Only one version of the bill is available at this time.

Old	New	Differences
1	1	THE SENATE S.B. NO. 3086 THIRTY-FIRST LEGISLATURE, 2022 STATE OF HAWAII A BILL FOR AN ACT RELATING TO CYBERSECURITY. BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF HAWAII:
2	2
3	3	THE SENATE S.B. NO. 3086
4	4	THIRTY-FIRST LEGISLATURE, 2022
5	5	STATE OF HAWAII
6	6
7	7	THE SENATE
8	8
9	9	S.B. NO.
10	10
11	11	3086
12	12
13	13	THIRTY-FIRST LEGISLATURE, 2022
14	14
15	15
16	16
17	17	STATE OF HAWAII
18	18
19	19
20	20
21	21
22	22
23	23
24	24
25	25
26	26
27	27
28	28
29	29
30	30
31	31	A BILL FOR AN ACT
32	32
33	33
34	34
35	35
36	36
37	37	RELATING TO CYBERSECURITY.
38	38
39	39
40	40
41	41
42	42
43	43	BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF HAWAII:
44	44
45	45
46	46
47	47	SECTION 1. Section 128B-1, Hawaii Revised Statutes, is amended to read as follows: "§128B-1 [Cybersecurity, economic, education, and infrastructure security coordinator; powers and duties.] Hawaii state cybersecurity program; authorities. (a) There is established [the full-time] a Hawaii state cybersecurity[, economic, education, and infrastructure security coordinator] program. The purpose of the program is to oversee cybersecurity and cyber resiliency matters[, including cybersecurity, economic, education, and infrastructure security for the State]. The [coordinator] program shall be [placed within the state department of defense.] administered by the office of homeland security. [(b) The coordinator shall be selected by the state adjutant general based on the recommendations of the various agencies, departments, and private entities that will partner with the coordinator. (c)] (b) The [coordinator shall partner] office of homeland security shall administer the program in partnership with representatives from the following entities: (1) The Hawaii state fusion center; [(2) The Hawaii state cyber resiliency center; (3)] (2) Federal government agencies; [(4)] (3) State government agencies; [(5)] (4) The counties of the State; [(6)] (5) Institutions of higher education; and [(7)] (6) Other entities within the power, water, communications, transportation, and finance sectors, including public utilities, private telecommunications companies, airlines, financial institutions, and private information technology companies. [(d)] (c) Notwithstanding any law to the contrary, in administering the program the [coordinator,] office of homeland security, through its various partnerships, shall develop the requirements and methods for: (1) Improving cyber resiliency within the State through the development of a structure that shall include education, cybersecurity, and critical infrastructure protection; (2) Improving the State's critical infrastructure network and resiliency, including identifying interdependencies of critical infrastructures, points of connection between critical infrastructures, the most critical nodes, and the cascading effects of a cyber-attack on these points of connection between critical infrastructure; (3) Improving the State's cybersecurity by using existing resources within the State; (4) Examining specific requirements and actions to accelerate the growth of the cybersecurity industry in the State; (5) Defining the requirements and opportunities to secure state, federal, and private moneys for cybersecurity activities and related educational programs; (6) Forming partnerships to implement cyber resiliency structures and protocol to identify and share information about possible cyber-attacks and mitigate damage and recover quickly and efficiently from cyber-attacks; and (7) Expanding the State's cybersecurity and cyber resiliency understanding and workforce through education. [(e)] (d) The [coordinator] office of homeland security may [request] utilize the assistance of other departments, agencies, and private companies, both inside and outside of the State to [carry out its duties.] administer the program. [(f)] (e) For the purposes of this section: ["Coordinator" shall mean the Hawaii cybersecurity, economic, education, and infrastructure security coordinator.] "Cyber resiliency" shall mean the ability to complete vulnerability assessments, identify potential cyber-attacks, mitigate losses from cyber-attacks, and recover quickly and efficiently from cyber-attacks. "Program" shall mean the Hawaii state cybersecurity program." SECTION 2. Statutory material to be repealed is bracketed and stricken. New statutory material is underscored. SECTION 3. This Act shall take effect upon its approval. INTRODUCED BY: _____________________________ BY REQUEST
48	48
49	49	SECTION 1. Section 128B-1, Hawaii Revised Statutes, is amended to read as follows:
50	50
51	51	"§128B-1 [Cybersecurity, economic, education, and infrastructure security coordinator; powers and duties.] Hawaii state cybersecurity program; authorities. (a) There is established [the full-time] a Hawaii state cybersecurity[, economic, education, and infrastructure security coordinator] program. The purpose of the program is to oversee cybersecurity and cyber resiliency matters[, including cybersecurity, economic, education, and infrastructure security for the State]. The [coordinator] program shall be [placed within the state department of defense.] administered by the office of homeland security.
52	52
53	53	[(b) The coordinator shall be selected by the state adjutant general based on the recommendations of the various agencies, departments, and private entities that will partner with the coordinator.
54	54
55	55	(c)] (b) The [coordinator shall partner] office of homeland security shall administer the program in partnership with representatives from the following entities:
56	56
57	57	(1) The Hawaii state fusion center;
58	58
59	59	[(2) The Hawaii state cyber resiliency center;
60	60
61	61	(3)] (2) Federal government agencies;
62	62
63	63	[(4)] (3) State government agencies;
64	64
65	65	[(5)] (4) The counties of the State;
66	66
67	67	[(6)] (5) Institutions of higher education; and
68	68
69	69	[(7)] (6) Other entities within the power, water, communications, transportation, and finance sectors, including public utilities, private telecommunications companies, airlines, financial institutions, and private information technology companies.
70	70
71	71	[(d)] (c) Notwithstanding any law to the contrary, in administering the program the [coordinator,] office of homeland security, through its various partnerships, shall develop the requirements and methods for:
72	72
73	73	(1) Improving cyber resiliency within the State through the development of a structure that shall include education, cybersecurity, and critical infrastructure protection;
74	74
75	75	(2) Improving the State's critical infrastructure network and resiliency, including identifying interdependencies of critical infrastructures, points of connection between critical infrastructures, the most critical nodes, and the cascading effects of a cyber-attack on these points of connection between critical infrastructure;
76	76
77	77	(3) Improving the State's cybersecurity by using existing resources within the State;
78	78
79	79	(4) Examining specific requirements and actions to accelerate the growth of the cybersecurity industry in the State;
80	80
81	81	(5) Defining the requirements and opportunities to secure state, federal, and private moneys for cybersecurity activities and related educational programs;
82	82
83	83	(6) Forming partnerships to implement cyber resiliency structures and protocol to identify and share information about possible cyber-attacks and mitigate damage and recover quickly and efficiently from cyber-attacks; and
84	84
85	85	(7) Expanding the State's cybersecurity and cyber resiliency understanding and workforce through education.
86	86
87	87	[(e)] (d) The [coordinator] office of homeland security may [request] utilize the assistance of other departments, agencies, and private companies, both inside and outside of the State to [carry out its duties.] administer the program.
88	88
89	89	[(f)] (e) For the purposes of this section:
90	90
91	91	["Coordinator" shall mean the Hawaii cybersecurity, economic, education, and infrastructure security coordinator.]
92	92
93	93	"Cyber resiliency" shall mean the ability to complete vulnerability assessments, identify potential cyber-attacks, mitigate losses from cyber-attacks, and recover quickly and efficiently from cyber-attacks.
94	94
95	95	"Program" shall mean the Hawaii state cybersecurity program."
96	96
97	97	SECTION 2. Statutory material to be repealed is bracketed and stricken. New statutory material is underscored.
98	98
99	99	SECTION 3. This Act shall take effect upon its approval.
100	100
101	101
102	102
103	103	INTRODUCED BY: _____________________________
104	104	BY REQUEST
105	105
106	106	INTRODUCED BY:
107	107
108	108	_____________________________
109	109
110	110
111	111
112	112
113	113
114	114	BY REQUEST
115	115
116	116	Report Title: Cybersecurity; Department of Defense; Office of Homeland Security Description: Updates and provides clarification to reflect the existence of the Hawaii State Cybersecurity Program, which is administered by the Hawaii Office of Homeland Security. Eliminates the state cybersecurity, economic, education, and infrastructure security coordinator position. The summary description of legislation appearing on this page is for informational purposes only and is not legislation or evidence of legislative intent.
117	117
118	118
119	119
120	120
121	121
122	122	Report Title:
123	123
124	124	Cybersecurity; Department of Defense; Office of Homeland Security
125	125
126	126
127	127
128	128	Description:
129	129
130	130	Updates and provides clarification to reflect the existence of the Hawaii State Cybersecurity Program, which is administered by the Hawaii Office of Homeland Security. Eliminates the state cybersecurity, economic, education, and infrastructure security coordinator position.
131	131
132	132
133	133
134	134
135	135
136	136
137	137
138	138	The summary description of legislation appearing on this page is for informational purposes only and is not legislation or evidence of legislative intent.