HB 2736 — cybersecurity; data encryption; pilot program

Fifty-seventhHouse LegislatureEngrossed Federalismcybersecurity; First Regular Session H.B.

2736data PROPOSEDencryption; SENATE AMENDMENTS TO H.B.

2736pilot (Referenceprogram toState of Arizona House engrossedof bill)Representatives AmendmentFifty-seventh instructionLegislature key:First Regular Session HOUSE BILL 2736 AN ACT AMENDING TITLE 26, CHAPTER 1, ARTICLE 1, ARIZONA REVISED STATUTES, BY ADDING SECTION 26-108;

[GREENRELATING UNDERLININGTO INCYBERSECURITY. BRACKETS] indicates text added to statute or previously enacted session law.

[Green(TEXT underliningOF inBILL brackets]BEGINS indicatesON textNEXT addedPAGE) to- newi session- lawH.B. or text restoring existing law.

[GREEN2736 STRIKEOUTBe INit BRACKETS]enacted indicatesby newthe textLegislature removedof fromthe statuteState orof previouslyArizona: enacted session law.

[GreenSection strikeout1. in brackets] indicates text removed from existing statute, previously enacted session law or new session law.

<<Green carets>> indicate a section added to the bill.

<<Green strikeout in carets>> indicates a section removed from the bill.

The bill as proposed to be amended is reprinted as follows:

<<Section 1.

THE RESULTS OF THE AUDIT SHALL BE MADE AVAILABLE TO THE PUBLIC ON THE DEPARTMENT'S WEBSITE WITHIN FORTY-EIGHT HOURS AFTER THE AUDIT'S COMPLETION.>>COMPLETION. Senate Amendments to H.B.

2736Sec. <<Section 1.

Section 26-183, Arizona Revised Statutes, is amended to read:

26-183.

National guard cyberattack prevention, response and support activities;

national guard cyber response revolving fund;

purpose;

exemption A.

The national guard of this state may engage in [cyber-attack] [CYBERATTACK] prevention, response and support activities for this state and political subdivisions of this state.

B.

The national guard of this state may enter into mutual aid agreements pertaining to cyber response and protection activities with state agencies and political subdivisions of this state as authorized by section 26-309.

C.

The national guard cyber response revolving fund is established consisting of monies appropriated by the legislature and monies received as reimbursement for costs incurred by this state while rendering aid pursuant to subsection A of this section.

The department of emergency and military affairs shall administer the fund.

Monies in the fund are continuously appropriated and are exempt from the provisions of section 35-190 relating to lapsing of appropriations.

D.

Monies in the fund shall be used for the costs incurred by this state while assisting agencies and political subdivisions of this state, or as directed by the governor, with cyber support activities pursuant to subsection A of this section.

[E.

SUBJECT TO AVAILABLE MONIES, CYBERATTACK PREVENTION, RESPONSE AND SUPPORT ACTIVITIES MAY INCLUDE CONDUCTING AN ASSESSMENT OF A TECHNOLOGICAL PRODUCT THAT IS OR MAY BE PURCHASED BY THIS STATE OR A POLITICAL SUBDIVISION OF THIS STATE.

THE ASSESSMENT MAY INCLUDE ANY OF THE FOLLOWING:

1.

PENETRATION TESTING TO IDENTIFY VULNERABILITIES AND ASSESS THE ROBUSTNESS OF CYBERSECURITY DEFENSES.

HARDWARE NONDESTRUCTIVE TESTING TO EVALUATE THE INTEGRITY AND SECURITY COMPLIANCE OF PHYSICAL SECURITY COMPONENTS.

3.

VENDOR-CAPABILITY VERIFICATION TO CONFIRM THAT A VENDOR THAT CONTRACTS WITH THIS STATE OR A POLITICAL SUBDIVISION OF THIS STATE IS ABLE TO MEET A CONTRACT'S TECHNICAL OBLIGATIONS AND CYBERSECURITY STANDARDS.

F.

THE ADJUTANT GENERAL'S ANNUAL REPORT THAT IS SUBMITTED TO THE GOVERNOR, THE PRESIDENT OF THE SENATE AND THE SPEAKER OF THE HOUSE OF REPRESENTATIVES PURSUANT TO SECTION 26-102 SHALL INCLUDE A GENERALIZED REPORT ON THE CYBERATTACK PREVENTION, RESPONSE AND SUPPORT ACTIVITIES PERFORMED BY THE NATIONAL GUARD OF THIS STATE.]>> Sec.

2.

The Arizona department of homeland security shall implement a seven-year data encryption and cybersecurity study that is designed to protect information technology data against unauthorized access through the use of a software and hardware solution and to upgrade the -cybersecurity 2infrastructure -of Senateinformation Amendmentstechnology tosystems H.B.in this state.