Texas Senate Bill SB1470

Texas 2017 - 85th Regular

Caption

Relating to the powers and duties of the Department of Information Resources regarding cybersecurity.

Impact

This legislation will amend the Government Code of Texas to incorporate new sections addressing the increasing complexities of cybersecurity incidents. Key elements in the bill include an assessment of available resources for handling the operational and financial fallout from cybersecurity events, as well as suggestions for legislative changes necessary for better protection against such incidents. Additionally, the bill evaluates the utility of cybersecurity insurance and outlines options for disaster recovery, which may create a more robust framework for state cybersecurity responses.

Summary

SB1470 is an act relating to the powers and duties of the Department of Information Resources concerning cybersecurity. The bill mandates that, by August 31 of each even-numbered year, the department submit a report to the governor, lieutenant governor, and legislature. This report is to include various assessments and recommendations aimed at enhancing the state's cybersecurity posture and managing the risks associated with potential cybersecurity events. The bill emphasizes the need for continuous improvement and strategic planning in cybersecurity efforts at the state level.

Contention

Notably, SB1470 introduces a provision for emergency funding in the event of a cybersecurity occurrence that necessitates immediate financial assistance. This provision allows the department to seek emergency funds from the governor or the Legislative Budget Board, potentially influencing how the state allocates resources in crisis situations. Stakeholders may debate the adequacy of these measures in preemptively addressing cybersecurity threats and the efficiency of the funding mechanisms proposed in the act. Ensuring the efficacy of state responses to cybersecurity threats may also raise questions about the responsibilities of various agencies involved in cybersecurity governance.