FIRST REGULAR SESSION SENATE BILL NO. 113 103RD GENERAL ASSEMBLY INTRODUCED BY SENATOR WILLIAMS. 0604S.01I KRISTINA MARTIN, Secretary AN ACT To amend chapter 620, RSMo, by adding thereto one new section relating to grants to employers for the purpose of enhancing cybersecurity. Be it enacted by the General Assembly of the State of Missouri, as follows: Section A. Chapter 620, RSMo, is amended by adding thereto 1 one new section, to be known as section 620.2550, to read as 2 follows:3 620.2550. 1. The department of economic development 1 shall distribute to any employer a one -time grant for the 2 purpose of enhancing cybersecu rity, subject to the 3 requirements of this section. No employer shall receive 4 more than one grant under this section. 5 2. Grants distributed under this section shall not 6 exceed ninety percent of the total cost of the cybersecurity 7 enhancement. 8 3. (1) In making grants to employers under this 9 section, the department of economic development shall 10 reserve fifty percent of the funding for qualifying 11 employers with at least one but not more than fifty 12 employees. Any reserved amount not issued or awarded to an 13 employer with at least one but not more than fifty employees 14 by January first may be issued to an employer otherwise 15 eligible for an award under this section. 16 (2) Notwithstanding the provisions of subdivision (1) 17 of this subsection, priority shall be given to any company 18 SB 113 2 contracting with the state for the purpose of protecting 19 critical infrastructure. 20 4. Subject to appropriation, no more than ten million 21 dollars shall be distributed under this section in any 22 fiscal year. No more than fifteen thousand dollars shall be 23 distributed to any one employer. 24 5. (1) The department of economic development shall 25 create an online application form as part of its website, 26 which shall be the sole means of applying for grants under 27 this section. Any employer seeking a grant under this 28 section shall submit an application to the department using 29 such form on the department's website. The employer shall 30 submit documents showing how the employer plans to enhance 31 cybersecurity, including plans for how the employer will 32 cover the remaining costs for its cybersecurity enhancement. 33 (2) In assessing an employer's plans for covering the 34 remaining costs, the department shall consider only costs 35 for the following: 36 (a) Hardware; 37 (b) Software, whether leased or purchased; 38 (c) Contracts for an external cybersecurity provider; 39 (d) Installation costs for cybersecurity; 40 (e) Costs related to increased square footage in the 41 employer's place of business; 42 (f) Employee training costs; 43 (g) New employee salaries; and 44 (h) Existing employee salaries due to new 45 cybersecurity duties. 46 (3) Any employer applying for a grant shall submit 47 documentation to the department showing how grant fund s will 48 be used. 49 SB 113 3 6. The department shall prescribe the time of filing 50 applications and supervise the processing thereof. 51 7. The department shall select qualified recipients to 52 receive grants and determine the manner and method of 53 payment to the recipients. 54 8. Any employer who receives a grant under this 55 section shall submit documentation to the department no 56 later than one year after the distribution showing how the 57 grant funds were spent. 58 9. In the case of employers with emplo yees and 59 locations in more than one state, grant funds distributed 60 under this section shall be used only for locations in 61 Missouri and employees residing in Missouri. 62 10. For purposes of this section, the terms "enhancing 63 cybersecurity" and "cybe rsecurity enhancement" mean: 64 (1) Cybersecurity improvement investments; 65 (2) Cybersecurity risk assessment costs; 66 (3) Costs associated with cyber -attack prevention 67 employee training programs; and 68 (4) Costs associated with upskilling employees with 69 cybersecurity-related certifications or credentials. 70 11. Pursuant to section 23.253 of the Missouri sunset 71 act: 72 (1) The program authorized pursuant to this section 73 shall automatically sunset six years after the effective 74 date of this section unless reauthorized by an act of the 75 general assembly; and 76 (2) If such program is reauthorized, the program 77 authorized pursuant to this section shall automatically 78 sunset twelve years after the effective date of the 79 reauthorization; and 80 SB 113 4 (3) This section shall terminate on September first of 81 the calendar year immediately following the calendar year in 82 which the program authorized pursuant to this section is 83 sunset. 84