HB 1033-Relating to Information Technology Security
On Wednesday, February 8th, HB 1033, relating to Information Technology Security, by Rep. Frank Artiles (R-Miami) was heard before the House Government Operations Appropriations Subcommittee and passed unanimously by a vote of 9 yeas and 0 nays. AIF stood in support of this bill.
HB 1033 will put into place procedures to, hopefully, prevent/aide state agencies in the event of a cyber-attack. The bill requires the Agency for State Technology (AST) to establish standards and processes consistent with best practices for both information technology (IT) security and cybersecurity. It also requires AST to develop and publish guidelines and processes for an IT security framework to be used by state agencies. In part, the guidelines and processes must address completing risk assessments administered by a third party, establishing a computer security incident response team (team), and establishing an IT incident reporting process.
The bill requires the information security manager of each state agency to establish a team to respond to a suspected computer security incident. It also requires each state agency head to conduct a risk assessment administered by a third party by July 31, 2017; conduct IT security and cybersecurity training for new employees; ensure that certain personnel understand their roles and responsibilities; develop notification procedures for reporting IT security incidents and breaches; and improve organizational response activities.
The bill requires the Technology Advisory Council within AST to have at least one member who is a cybersecurity expert.
The bill sponsor spoke on a recent cyber-attack in South Carolina in which thousands of resident’s social security numbers have been hacked. The goal of this bill is to prevent a threat such as that in the state of Florida.
The next committee stop for HB 1033 will be in the House State Affairs Committee.
AIF supports legislation that will bring our states cyber security measures up to date to protect Floridians and Florida’s businesses from potential cyber-attacks.
