ENROLLED
2019 Regular Session
HOUSE CONCURRENT RESOL UTION NO. 67
BY REPRESENTATIVE FOIL AND SENATOR THOMPSON
A CONCURRENT RESOL UTION
To urge and request the Department of Economic Development, in cooperation with the
Louisiana Association of Business and Industry, to create a task force to study and
conduct a beta test that is composed of volunteer representatives from private
businesses that are domiciled and licensed to conduct business in the state of
Louisiana, to determine the cost, resources, and time required for varying sizes of
businesses to adhere to the Cybersecurity Framework Standards promulgated by the
National Institute of Standards and Technology, and to provide a written report of
its findings and recommendations and a proposed budget to the House Committee
on Commerce; the Senate Committee on Commerce, Consumer Protection, and
International Affairs; the House Committee on Ways and Means; and the Senate
Committee on Revenue and Fiscal Affairs no later than January 10, 2020.
WHEREAS, cybersecurity breaches are increasing in frequency, with criminals
routinely targeting businesses; and
WHEREAS, the state consistently contracts with local businesses to provide goods
and services; and
WHEREAS, cyber-related attacks not only occur directly against a host's network,
but also through service providers that find alternative entrances through a third party; and
WHEREAS, to protect the integrity of its own information systems and networks,
the state must be assured that vendors with which it does business take the necessary steps
to do the same; and
Page 1 of 4 HCR NO. 67 ENROLLED
WHEREAS, the Cybersecurity Enhancement Act of 2014 formalized the role of the
National Institute of Standards and Technology (NIST) and empowered the United States
secretary of commerce, through the director of NIST, to develop a voluntary Cybersecurity
Framework; and
WHEREAS, in 2014, the NIST drafted a Cybersecurity Framework which provides
a policy framework of computer security consisting of standards, guidelines, and best
practices to manage cybersecurity-related risks by focusing on five core functions: identify,
protect, detect, respond, and recover; and
WHEREAS, the Cybersecurity Framework further includes a self-assessment tool
for businesses to use to discover vulnerabilities and prioritize cybersecurity objectives; and
WHEREAS, the Cybersecurity Framework was drafted in plain language to enable
it to be a more cost-effective protocol; and
WHEREAS, many businesses are either unaware of cybersecurity risks or of the
benefits of the NIST Cybersecurity Framework, or both; and
WHEREAS, businesses that are aware of cybersecurity risks often fear the cost of
implementing the Cybersecurity Framework, placing both the business and its partners at
risk; and
WHEREAS, the use of the Cybersecurity Framework is not presently mandated as
private businesses and industry may require financial incentive for its adoption and use.
THEREFORE, BE IT RESOLVED that the Legislature of Louisiana does hereby
urge and request the Department of Economic Development, in cooperation with the
Louisiana Association of Business and Industry, to create a task force to study and conduct
a beta test that is composed of volunteer representatives from private businesses that are
domiciled and licensed to conduct business in the state of Louisiana, and to determine the
cost, resources, and time required for varying sizes of businesses to adhere to the
Cybersecurity Framework Standards promulgated by the National Institute of Standards and
Technology.
BE IT FURTHER RESOLVED that the task force shall be composed of the
following members:
(1) The chairman of the House Committee on Commerce or his designee.
Page 2 of 4 HCR NO. 67 ENROLLED
(2) The chairman of the Senate Committee on Commerce, Consumer Protection, and
International Affairs or his designee.
(3) The chairman of the House Committee on Ways and Means or his designee.
(4) The chairman of the Senate Committee on Revenue and Fiscal Affairs or his
designee.
(5) The executive director of the Stephenson Disaster Management Institute of
Louisiana State University or his designee.
(6) The president of the Louisiana Association of Business and Industry or his
designee.
(7) The director of the Governor's Office of Homeland Security and Emergency
Preparedness or his designee.
(8) The director of the Louisiana State Analytical and Fusion Exchange or his
designee.
(9) The director of business intelligence at Louisiana Economic Development.
(10) A representative from the Louisiana Business Emergency Operations Center,
appointed by the director of the Governor's Office of Homeland Security and Emergency
Preparedness, or his designee.
(11) The president of the Louisiana Chemical Association or his designee.
(12) The president of the Louisiana Mid-Continent Oil and Gas Association or his
designee.
(13) The president of the Baton Rouge Area Chamber or his designee.
(14) The executive director of the Cyber Innovation Center or his designee.
(15) The director of the Louisiana Small Business Development Center or his
designee.
(16) The chief executive officer of LCTA-The Internet & Television Association or
his designee.
(17) The chairman of the Louisiana Telecommunications Association or his
designee.
BE IT FURTHER RESOLVED that the director of business intelligence at the
Department of Economic Development and the president of the Louisiana Association of
Business and Industry shall be jointly responsible for designating, delegating, and managing
Page 3 of 4 HCR NO. 67 ENROLLED
the duties of the task force, and shall convene the first meeting of the task force no later than
August 1, 2019, at which time the task force shall adopt rules of procedure, a work and
planning schedule, and develop any additional measures that it deems necessary for the
timely performance of its duties, including the selection of officers.
BE IT FURTHER RESOLVED that the task force conduct a beta test, determine the
cost, resources, and time required for businesses to adhere to the Cybersecurity Framework
Standards, and provide a written report of its findings and recommendations, and a proposed
budget including a financial incentive plan to the House Committee on Commerce; the
Senate Committee on Commerce, Consumer Protection, and International Affairs; the House
Committee on Ways and Means; and the Senate Committee on Revenue and Fiscal Affairs
no later than January 10, 2020.
BE IT FURTHER RESOLVED that a copy of this Resolution be transmitted to the
entities named in this Resolution to serve or be represented on the task force.
SPEAKER OF THE HOUSE OF REPRESENTATIVES
PRESIDENT OF THE SENATE
Page 4 of 4