(Constitutional Amendment) Establishes the State Cybersecurity and Information Technology Fund and dedicates revenues to the fund
Impact
If passed, the bill would directly impact state legislation concerning financial allocations to cybersecurity initiatives. By earmarking a consistent revenue stream for technology enhancement and cybersecurity improvements, the fund aims to provide state agencies with the resources they need to better safeguard information technology systems. Additionally, the bill includes provisions that unspent funds at the end of each fiscal year will remain in the fund, allowing for the accumulation and future investment of these resources, which should provide long-term benefits for state IT programs.
Summary
House Bill 398 proposes a constitutional amendment to establish the State Cybersecurity and Information Technology Fund within the state treasury. The bill mandates that 0.35% of the revenues flowing through the Bond Security and Redemption Fund be allocated to this newly created fund. The purpose of the fund is to enhance and upgrade the state's information technology infrastructure as well as address its cybersecurity needs. This initiative signifies a proactive measure by the state to bolster its defenses against cyber threats and improve its technological capabilities in serving its citizens.
Sentiment
The general sentiment around HB 398 appears to be supportive, especially among lawmakers focused on enhancing state security and technological resilience. Advocates argue that in an increasingly digital world, this financial commitment is crucial for protecting both public and private sector data. However, potential concerns regarding the proper management and prioritization of funds may arise, particularly among those who worry about the adequacy of oversight for such expenditures.
Contention
A notable point of concern tied to HB 398 includes the lack of specified governance for how the funds will be used beyond general appropriation for cybersecurity and technology enhancements. Critics may question whether the establishment of such a fund could lead to misallocation of resources if priorities are not established or effectively monitored. Furthermore, there might be apprehension about the fund becoming a permanent financial fixture in the state budget if its usage and effectiveness are not clearly demonstrated.
Establishes the State Cybersecurity and Information Technology Fund and dedicates revenues to the fund (Items #10 and #11) (EN SEE FISC NOTE SD EX See Note)
Adds to existing law to establish a cybersecurity and resiliency fund to address the state's need for information technology and cybersecurity infrastructure.
Adds to existing law to establish the Cybersecurity and Resiliency Fund to address the state's need for information technology and cybersecurity infrastructure.
In boards and offices, providing for information technology; establishing the Office of Information Technology and the Information Technology Fund; providing for administrative and procurement procedures and for the Joint Cybersecurity Oversight Committee; imposing duties on the Office of Information Technology; providing for administration of Pennsylvania Statewide Radio Network; and imposing penalties.
In boards and offices, providing for information technology; establishing the Office of Information Technology and the Information Technology Fund; providing for administrative and procurement procedures and for the Joint Cybersecurity Oversight Committee; imposing duties on the Office of Information Technology; providing for administration of Pennsylvania Statewide Radio Network; and imposing penalties.
Removing the expiration on certain cybersecurity requirements, modifying the duties of chief information security officers and cybersecurity programs, requiring assessment of executive branch agency compliance with cybersecurity requirements, providing for consideration of such compliance by the legislature during the budget process and creating the judicial branch technology oversight council.