BILL ANALYSIS S.B. 34 By: Zaffirini Government Transparency & Operation Committee Report (Unamended) BACKGROUND AND PURPOSE Interested parties observe that the State of Texas increasingly relies on technology to manage the personal information of its citizens. Accordingly, the parties contend that the establishment of robust computer systems must be a priority for the state. The parties observe that the Department of Information Resources monitors relevant information from state agencies, but lacks a formal mechanism to communicate its analysis of this information and make recommendations to legislators and policymakers. S.B. 34 seeks to address these issues. CRIMINAL JUSTICE IMPACT It is the committee's opinion that this bill does not expressly create a criminal offense, increase the punishment for an existing criminal offense or category of offenses, or change the eligibility of a person for community supervision, parole, or mandatory supervision. RULEMAKING AUTHORITY It is the committee's opinion that this bill does not expressly grant any additional rulemaking authority to a state officer, department, agency, or institution. ANALYSIS S.B. 34 amends the Government Code to require the Department of Information Resources (DIR), not later than January 13 of each odd-numbered year, to submit a written report to the governor, the lieutenant governor, and the legislature evaluating information security for the state's information resources. The bill requires DIR, in preparing the report, to consider the information security plans submitted by state agencies under the Information Resources Management Act, any submitted vulnerability reports, and other available information regarding the security of the state's information resources. The bill requires DIR to omit from any written copies of the report information that could expose specific vulnerabilities in the security of the state's information resources. EFFECTIVE DATE September 1, 2015. BILL ANALYSIS # BILL ANALYSIS S.B. 34 By: Zaffirini Government Transparency & Operation Committee Report (Unamended) S.B. 34 By: Zaffirini Government Transparency & Operation Committee Report (Unamended) BACKGROUND AND PURPOSE Interested parties observe that the State of Texas increasingly relies on technology to manage the personal information of its citizens. Accordingly, the parties contend that the establishment of robust computer systems must be a priority for the state. The parties observe that the Department of Information Resources monitors relevant information from state agencies, but lacks a formal mechanism to communicate its analysis of this information and make recommendations to legislators and policymakers. S.B. 34 seeks to address these issues. CRIMINAL JUSTICE IMPACT It is the committee's opinion that this bill does not expressly create a criminal offense, increase the punishment for an existing criminal offense or category of offenses, or change the eligibility of a person for community supervision, parole, or mandatory supervision. RULEMAKING AUTHORITY It is the committee's opinion that this bill does not expressly grant any additional rulemaking authority to a state officer, department, agency, or institution. ANALYSIS S.B. 34 amends the Government Code to require the Department of Information Resources (DIR), not later than January 13 of each odd-numbered year, to submit a written report to the governor, the lieutenant governor, and the legislature evaluating information security for the state's information resources. The bill requires DIR, in preparing the report, to consider the information security plans submitted by state agencies under the Information Resources Management Act, any submitted vulnerability reports, and other available information regarding the security of the state's information resources. The bill requires DIR to omit from any written copies of the report information that could expose specific vulnerabilities in the security of the state's information resources. EFFECTIVE DATE September 1, 2015. BACKGROUND AND PURPOSE Interested parties observe that the State of Texas increasingly relies on technology to manage the personal information of its citizens. Accordingly, the parties contend that the establishment of robust computer systems must be a priority for the state. The parties observe that the Department of Information Resources monitors relevant information from state agencies, but lacks a formal mechanism to communicate its analysis of this information and make recommendations to legislators and policymakers. S.B. 34 seeks to address these issues. CRIMINAL JUSTICE IMPACT It is the committee's opinion that this bill does not expressly create a criminal offense, increase the punishment for an existing criminal offense or category of offenses, or change the eligibility of a person for community supervision, parole, or mandatory supervision. RULEMAKING AUTHORITY It is the committee's opinion that this bill does not expressly grant any additional rulemaking authority to a state officer, department, agency, or institution. ANALYSIS S.B. 34 amends the Government Code to require the Department of Information Resources (DIR), not later than January 13 of each odd-numbered year, to submit a written report to the governor, the lieutenant governor, and the legislature evaluating information security for the state's information resources. The bill requires DIR, in preparing the report, to consider the information security plans submitted by state agencies under the Information Resources Management Act, any submitted vulnerability reports, and other available information regarding the security of the state's information resources. The bill requires DIR to omit from any written copies of the report information that could expose specific vulnerabilities in the security of the state's information resources. EFFECTIVE DATE September 1, 2015.