88R3392 CXP-F By: Darby H.B. No. 1508 A BILL TO BE ENTITLED AN ACT relating to certain powers and duties in relation to information resources at public institutions of higher education and other state agencies. BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS: SECTION 1. Section 2054.076(b-1), Government Code, is amended to read as follows: (b-1) The department shall provide mandatory guidelines to state agencies regarding the continuing education requirements for cybersecurity training that must be completed by all information resources employees of the agencies. The department shall notify [consult with] the Information Technology Council for Higher Education regarding the manner in which [on applying] the guidelines apply to institutions of higher education. SECTION 2. Section 2054.102(b-1), Government Code, is amended to read as follows: (b-1) The Legislative Budget Board, in consultation with the department [and the Information Technology Council for Higher Education], shall establish criteria to evaluate state agency biennial operating plans. In developing the criteria, the board shall include criteria on: (1) the feasibility of proposed information resources projects for the biennium; (2) the consistency of the plan with the state strategic plan; (3) the appropriate provision of public electronic access to information; (4) evidence of business process streamlining and gathering of business and technical requirements; and (5) services, costs, and benefits. SECTION 3. Section 2054.377, Government Code, is amended to read as follows: Sec. 2054.377. INSTITUTIONS OF HIGHER EDUCATION. The department may not establish or expand a statewide technology center that requires [includes] participation by an institution of higher education unless the Information Technology Council for Higher Education agrees to the establishment or expansion. SECTION 4. Section 2059.052, Government Code, is amended to read as follows: Sec. 2059.052. SERVICES PROVIDED TO INSTITUTIONS OF HIGHER EDUCATION. The department may provide network security services to an institution of higher education, and may include an institution of higher education in a center, only after notifying [if and to the extent approved by] the Information Technology Council for Higher Education. SECTION 5. The following provisions of the Government Code are repealed: (1) Section 2054.066; (2) Sections 2054.121(c), (d), and (e); (3) Section 2054.1211; and (4) Section 2054.124(c). SECTION 6. This Act takes effect September 1, 2023.