The Cybersecurity Act mandates the formation of a five-year statewide cybersecurity plan that includes provisions for collaboration among various governmental levels and recommendations for statutory changes. This plan is intended to bolster the state's defenses against cyberattacks by enhancing the cooperation and coordination among local, tribal, and state authorities. Moreover, the bill emphasizes the necessity for technical assistance and training programs aimed at enhancing the cybersecurity knowledge and capabilities of state employees, thereby promoting a cohesive response strategy to potential breaches.
Summary
Senate Bill 98, known as the Cybersecurity Act, is a legislative initiative aimed at establishing a comprehensive cybersecurity framework for the state of New Mexico. It proposes the creation of a dedicated Cybersecurity Office within the Department of Information Technology, which would be responsible for overseeing the cybersecurity initiatives across state agencies, public educational institutions, and local governments. Central to this bill is the appointment of a State Chief of Information Security, who will spearhead the development and implementation of standards designed to protect digital information and technology assets.
Contention
Despite the overarching goals of enhancing cybersecurity, there are potential points of contention regarding resource allocation and the extent of state control over local cybersecurity measures. Opponents may argue that centralized oversight could lead to an erosion of local autonomy when it comes to addressing specific cybersecurity needs unique to their communities. The requirements for compliance and methodological standardization might also impose undue burdens on smaller local entities lacking in technical resources or expertise, raising concerns about equitable access to the necessary support and protections.
Requires businesses in financial essential infrastructure, and health care industries to develop cybersecurity plans and report cybersecurity incidents.
Relating to the establishment of the Texas Cyber Command and the transfer to it of certain powers and duties of the Department of Information Resources.