Texas 2021 - 87th Regular

Texas Senate Bill SB345 Compare Versions

Only one version of the bill is available at this time.
OldNewDifferences
11 87R2931 MWC-D
22 By: Paxton S.B. No. 345
33
44
55 A BILL TO BE ENTITLED
66 AN ACT
77 relating to state agency and local government compliance with
88 cybersecurity training requirements.
99 BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:
1010 SECTION 1. Subchapter A, Chapter 772, Government Code, is
1111 amended by adding Section 772.012 to read as follows:
1212 Sec. 772.012. COMPLIANCE WITH CYBERSECURITY TRAINING
1313 REQUIREMENTS. (a) In this section, "local government" has the
1414 meaning assigned by Section 2054.003.
1515 (b) To apply for a grant under this chapter, a local
1616 government must submit with the grant application a written
1717 certification of the local government's compliance with the
1818 cybersecurity training required by Section 2054.5191.
1919 (c) On a determination by the criminal justice division
2020 established under Section 772.006 that a local government awarded a
2121 grant under this chapter has not complied with the cybersecurity
2222 training required by Section 2054.5191, the local government shall
2323 pay to this state an amount equal to the amount of the grant award.
2424 A local government that is the subject of a determination described
2525 by this subsection is ineligible for another grant under this
2626 chapter until the second anniversary of the date the local
2727 government is determined ineligible.
2828 SECTION 2. The heading to Section 2054.5191, Government
2929 Code, is amended to read as follows:
3030 Sec. 2054.5191. CYBERSECURITY TRAINING REQUIRED: CERTAIN
3131 EMPLOYEES AND OFFICIALS.
3232 SECTION 3. Sections 2054.5191(a-1) and (b), Government
3333 Code, are amended to read as follows:
3434 (a-1) At least once each year, a local government shall:
3535 (1) identify local government employees and elected
3636 and appointed officials who have access to a local government
3737 computer system or database and use a computer to perform at least
3838 25 percent of the employee's or official's required duties; and
3939 (2) require the [those] employees and [elected]
4040 officials identified under Subdivision (1) [of the local
4141 government] to complete a cybersecurity training program certified
4242 under Section 2054.519 or offered under Section 2054.519(f).
4343 (b) The governing body of a local government may select the
4444 most appropriate cybersecurity training program certified under
4545 Section 2054.519 or offered under Section 2054.519(f) for employees
4646 and officials of the local government to complete. The governing
4747 body shall:
4848 (1) verify and report on the completion of a
4949 cybersecurity training program by employees and officials of the
5050 local government to the department; and
5151 (2) require periodic audits to ensure compliance with
5252 this section.
5353 SECTION 4. Section 2056.002(b), Government Code, is amended
5454 to read as follows:
5555 (b) The Legislative Budget Board and the governor's office
5656 shall determine the elements required to be included in each
5757 agency's strategic plan. Unless modified by the Legislative Budget
5858 Board and the governor's office, and except as provided by
5959 Subsection (c), a plan must include:
6060 (1) a statement of the mission and goals of the state
6161 agency;
6262 (2) a description of the indicators developed under
6363 this chapter and used to measure the output and outcome of the
6464 agency;
6565 (3) identification of the groups of people served by
6666 the agency, including those having service priorities, or other
6767 service measures established by law, and estimates of changes in
6868 those groups expected during the term of the plan;
6969 (4) an analysis of the use of the agency's resources to
7070 meet the agency's needs, including future needs, and an estimate of
7171 additional resources that may be necessary to meet future needs;
7272 (5) an analysis of expected changes in the services
7373 provided by the agency because of changes in state or federal law;
7474 (6) a description of the means and strategies for
7575 meeting the agency's needs, including future needs, and achieving
7676 the goals established under Section 2056.006 for each area of state
7777 government for which the agency provides services;
7878 (7) a description of the capital improvement needs of
7979 the agency during the term of the plan and a statement, if
8080 appropriate, of the priority of those needs;
8181 (8) identification of each geographic region of this
8282 state, including the Texas-Louisiana border region and the
8383 Texas-Mexico border region, served by the agency, and if
8484 appropriate the agency's means and strategies for serving each
8585 region;
8686 (9) a description of the training of the agency's
8787 contract managers under Section 656.052;
8888 (10) an analysis of the agency's expected expenditures
8989 that relate to federally owned or operated military installations
9090 or facilities, or communities where a federally owned or operated
9191 military installation or facility is located;
9292 (11) an analysis of the strategic use of information
9393 resources as provided by the instructions prepared under Section
9494 2054.095; [and]
9595 (12) a written certification of the agency's
9696 compliance with the cybersecurity training required under Sections
9797 2054.5191 and 2054.5192; and
9898 (13) other information that may be required.
9999 SECTION 5. (a) Section 772.012, Government Code, as added
100100 by this Act, applies only to a grant application submitted by a
101101 local government on or after September 1, 2021.
102102 (b) Section 2056.002(b), Government Code, as amended by
103103 this Act, applies only to a strategic plan submitted by a state
104104 agency on or after January 1, 2022.
105105 SECTION 6. This Act takes effect immediately if it receives
106106 a vote of two-thirds of all the members elected to each house, as
107107 provided by Section 39, Article III, Texas Constitution. If this
108108 Act does not receive the vote necessary for immediate effect, this
109109 Act takes effect September 1, 2021.