Vermont S 304: An act relating to an Interbranch Cybersecurity Task Force

Bill Text

BILL AS INTRODUCED S.304
2020 Page 1 of 2

VT LEG #344782 v.1
S.304 1
Introduced by Senators Brock, Benning, Collamore, Cummings, McNeil, 2
Pearson and Westman 3
Referred to Committee on 4
Date: 5
Subject: Information technology; cybersecurity; risk assessment; Auditor 6
Statement of purpose of bill as introduced: This bill proposes to create an 7
Interbranch Cybersecurity Task Force to develop standards, best practices, and 8
risk assessments for cybersecurity across State government. This bill also 9
proposes to require the State Auditor to annually audit the Task Force’s risk 10
assessment. 11
An act relating to an Interbranch Cybersecurity Task Force 12
It is hereby enacted by the General Assembly of the State of Vermont: 13
Sec. 1. 22 V.S.A. chapter 16 is added to read: 14
CHAPTER 16. INTERBRANCH CYBERSECUITY TASK FORCE 15
§ 961. INTERBRANCH CYBERSECURITY TASK FORCE. 16
(a) Creation. There is created the Interbranch Cybersecurity Task Force to 17
coordinate cybersecurity initiatives between the Executive, Legislative, and 18
Judicial branches of State government. 19

BILL AS INTRODUCED S.304
2020 Page 2 of 2

VT LEG #344782 v.1
(b) Membership. The Task Force shall be composed of the following 1
members: 2
(1) the Secretary of Digital Services; 3
(2) the Director of Legislative Information Technology; and 4
(3) the Chief Information Officer for the Judiciary. 5
(c) Powers and duties. The Committee shall study issues related to 6
cybersecurity and shall be responsible for developing the following: 7
(1) cybersecurity standards and best practices across all three branches 8
of State government; and 9
(2) a statewide risk assessment for cybersecurity, which shall be updated 10
annually. 11
§ 962. ANNUAL RISK ASSESSMENT AUDIT. 12
Annually on or before January 15, the State Auditor of Accounts shall 13
conduct a performance audit of the statewide risk assessment created by the 14
Interbranch Cybersecurity Task Force. 15
Sec. 2. EFFECTIVE DATE 16
This act shall take effect on July 1, 2020. 17