Requires state employees who use a computer to complete at least twenty-five percent of such employees' required duties to undergo annual cyber security training.
Summary
Bill A04739 mandates that state employees who utilize computers for at least 25% of their job responsibilities must complete annual cyber security training. The bill outlines that each state agency is responsible for identifying these employees and ensuring they participate in an approved training program at least once a year. The executive head of each agency is tasked with verifying completion of the training and conducting periodic internal reviews for compliance. Additionally, the bill includes provisions for the development of a verification form to track employee completion rates.
Impact
If enacted, this bill will enhance the cyber security preparedness of state agencies by ensuring that a significant portion of their workforce is trained in cyber security protocols. This could lead to a reduction in cyber threats and improve the overall security posture of state operations. The bill also introduces a framework for accountability within state agencies, as agency heads will be responsible for compliance and verification of training completion.
Sentiment
The sentiment surrounding Bill A04739 appears to be generally supportive, as it addresses a critical need for improved cyber security measures within state agencies. However, there may be concerns regarding the implementation of the training programs and the administrative burden it places on agencies to track compliance.
Contention
Notable points of contention may arise regarding the selection of training programs, as agencies may have differing opinions on what constitutes the most effective training. Additionally, there could be discussions about the potential costs associated with implementing these training programs and whether they might divert resources from other important functions within the agencies.