Missouri 2025 2025 Regular Session

Missouri Senate Bill SB113 Introduced / Bill

Filed 12/06/2024

                     
FIRST REGULAR SESSION 
SENATE BILL NO. 113 
103RD GENERAL ASSEMBLY  
INTRODUCED BY SENATOR WILLIAMS. 
0604S.01I 	KRISTINA MARTIN, Secretary  
AN ACT 
To amend chapter 620, RSMo, by adding thereto one new section relating to grants to employers 
for the purpose of enhancing cybersecurity. 
 
Be it enacted by the General Assembly of the State of Missouri, as follows: 
     Section A.  Chapter 620, RSMo, is amended by adding thereto 1 
one new section, to be known as section 620.2550, to read as 2 
follows:3 
     620.2550.  1.  The department of economic development 1 
shall distribute to any employer a one -time grant for the 2 
purpose of enhancing cybersecu rity, subject to the 3 
requirements of this section.  No employer shall receive 4 
more than one grant under this section. 5 
     2.  Grants distributed under this section shall not 6 
exceed ninety percent of the total cost of the cybersecurity 7 
enhancement. 8 
    3.  (1)  In making grants to employers under this 9 
section, the department of economic development shall 10 
reserve fifty percent of the funding for qualifying 11 
employers with at least one but not more than fifty 12 
employees.  Any reserved amount not issued or awarded to an  13 
employer with at least one but not more than fifty employees 14 
by January first may be issued to an employer otherwise 15 
eligible for an award under this section. 16 
     (2)  Notwithstanding the provisions of subdivision (1) 17 
of this subsection, priority shall be given to any company 18   SB 113 	2 
contracting with the state for the purpose of protecting 19 
critical infrastructure. 20 
     4.  Subject to appropriation, no more than ten million 21 
dollars shall be distributed under this section in any 22 
fiscal year.  No more than fifteen thousand dollars shall be 23 
distributed to any one employer. 24 
     5.  (1)  The department of economic development shall 25 
create an online application form as part of its website, 26 
which shall be the sole means of applying for grants under  27 
this section.  Any employer seeking a grant under this 28 
section shall submit an application to the department using 29 
such form on the department's website.  The employer shall 30 
submit documents showing how the employer plans to enhance 31 
cybersecurity, including plans for how the employer will 32 
cover the remaining costs for its cybersecurity enhancement. 33 
     (2)  In assessing an employer's plans for covering the 34 
remaining costs, the department shall consider only costs 35 
for the following: 36 
     (a)  Hardware; 37 
     (b)  Software, whether leased or purchased; 38 
     (c)  Contracts for an external cybersecurity provider; 39 
     (d)  Installation costs for cybersecurity; 40 
     (e)  Costs related to increased square footage in the 41 
employer's place of business; 42 
     (f)  Employee training costs; 43 
     (g)  New employee salaries; and 44 
     (h)  Existing employee salaries due to new 45 
cybersecurity duties. 46 
     (3)  Any employer applying for a grant shall submit 47 
documentation to the department showing how grant fund s will  48 
be used. 49   SB 113 	3 
     6.  The department shall prescribe the time of filing 50 
applications and supervise the processing thereof. 51 
     7.  The department shall select qualified recipients to 52 
receive grants and determine the manner and method of 53 
payment to the recipients. 54 
     8.  Any employer who receives a grant under this 55 
section shall submit documentation to the department no 56 
later than one year after the distribution showing how the 57 
grant funds were spent. 58 
     9.  In the case of employers with emplo yees and  59 
locations in more than one state, grant funds distributed 60 
under this section shall be used only for locations in 61 
Missouri and employees residing in Missouri. 62 
     10.  For purposes of this section, the terms "enhancing 63 
cybersecurity" and "cybe rsecurity enhancement" mean: 64 
     (1)  Cybersecurity improvement investments; 65 
     (2)  Cybersecurity risk assessment costs; 66 
     (3)  Costs associated with cyber -attack prevention  67 
employee training programs; and 68 
     (4)  Costs associated with upskilling employees with  69 
cybersecurity-related certifications or credentials. 70 
     11.  Pursuant to section 23.253 of the Missouri sunset 71 
act: 72 
     (1)  The program authorized pursuant to this section 73 
shall automatically sunset six years after the effective 74 
date of this section unless reauthorized by an act of the 75 
general assembly; and 76 
     (2)  If such program is reauthorized, the program 77 
authorized pursuant to this section shall automatically 78 
sunset twelve years after the effective date of the 79 
reauthorization; and 80   SB 113 	4 
     (3)  This section shall terminate on September first of 81 
the calendar year immediately following the calendar year in 82 
which the program authorized pursuant to this section is 83 
sunset. 84 
