Relating to security procedures for digital applications that pose a network security risk to state agencies.
Impact
This legislation seeks to enhance the protective measures around digital communication and application usage within state agencies, thereby minimizing the risk of data breaches and cybersecurity threats. By compiling a list of digital applications considered a security risk and obligating state agencies to follow designated security policies, SB2358 aims to safeguard sensitive information and maintain operational integrity in today's increasingly digital government landscape. The model policies developed will be exempt from public disclosure under Chapter 552, further emphasizing the focus on privacy and security.
Summary
Senate Bill 2358, introduced by Senator Parker, addresses security procedures for digital applications that pose network security risks to state agencies. The bill proposes the creation of a digital application security risk list, along with the development of policies that state agencies must adopt to limit or prohibit the use of identified risky digital applications on state-owned and personal devices used for work purposes. The effective date of the bill is set for September 1, 2023, with specific compliance measures requiring state agencies to have their policies in place by May 1, 2024.
Sentiment
The sentiment surrounding SB2358 appears largely favorable, as evidenced by the unanimous support it received during the voting process, with 27 votes in favor and none against. Legislative discussions highlighted the necessity of improved network security protocols and the importance of protecting state agencies from potential digital threats. Supporters argue that taking proactive measures will not only enhance data protection but also ensure that state agencies can continue to function effectively in a secure environment.
Contention
While there was notable support, discussions around the bill also pointed to concerns regarding the implications of exempting security policies from disclosure, which some may view as compromising transparency. Additionally, the requirement for state agencies to identify and update their policies could impose administrative burdens. Ensuring compliance with the newly established regulations while maintaining operational fluidity and adapting to evolving technology will be a critical challenge for state agencies moving forward.
Digital assets, prohibits the state from certain actions related to digital assets and exempts certain actions from classification as a security or money transfer