State Government - State and Local Government Employees and Contractors - Cybersecurity Training
Impact
The passing of HB5 is set to significantly affect the state's cybersecurity protocols, especially within public sector employment. It establishes specific requirements for training employees who have access to state or local government computer systems. These mandates are designed to improve overall information security practices within government entities, thus decreasing the likelihood of data breaches and cyberattacks. The certification process for such trainings will be overseen by the State Chief Information Security Officer, further centralizing cybersecurity management across the state's institutions.
Summary
House Bill 5 focuses on enhancing cybersecurity measures for state and local government employees and contractors in Maryland. The bill mandates the development and implementation of a comprehensive Cybersecurity Awareness and Training Program, which is to be overseen by the Maryland Cybersecurity Coordinating Council. This program is aimed at improving both organizational and individual attention to cybersecurity issues and ensuring employees are sufficiently educated about their roles and responsibilities regarding information protection.
Contention
One noteworthy area of contention surrounding HB5 relates to its implementation timeline and the extent of its reach among local government units. Critics may argue about the burden placed on local units to comply with training requirements and the potential need for resources that they might not possess. Furthermore, ensuring that contractors adhere to the cybersecurity training requirements could pose logistical challenges, particularly in verifying completion and maintaining comprehensive training assessments. The bill is also expected to spark discussions on the balance between centralized authority in cybersecurity and local autonomy in determining relevant training for employees.
Relating to the requirement by certain governmental entities for diversity, equity, and inclusion statements and training from employees, prospective employees, and contractors.
Requires a background investigation of employees, prospective employees, contractors and prospective contractors of certain governmental agencies. (BDR 38-1122)
Requires businesses in financial essential infrastructure, and health care industries to develop cybersecurity plans and report cybersecurity incidents.
Relating to the establishment of the Texas Cyber Command and the transfer to it of certain powers and duties of the Department of Information Resources.