SB 709 — AN ACT ESTABLISHING A TASK FORCE TO STUDY CYBERSECURITY.

General Assembly ProposedCommittee Bill No.

26205995 Referred to Committee on PUBLIC SAFETY AND SECURITY Introduced by:

(PS) AN ACT CONCERNING A DIVISION OF CYBERSECURITY WITHIN THE DEPARTMENT OF EMERGENCY SERVICES AND PUBLIC PROTECTION.

Be it enacted by the Senate and House of Representatives in General Assembly convened:

Section 1.

Section 29-1b of the general statutes is repealed and the following is substituted in lieu thereof (Effective July 1, 2019):

(a) There shall be within the Department of Emergency Services and Public Protection a Division of State Police.

The Commissioner of Emergency Services and Public Protection shall serve as administrative head and commanding officer of the State Police Division.

As administrative head, said commanding officer of the Division of State Police shall delegate said commanding officer's jurisdiction of the affairs of the Division of State Police to a deputy commissioner who shall have the powers and privileges conferred by statute upon a state policeman.

(b) There shall be within said department a Division of Emergency Management and Homeland Security.

The commissioner shall serve as administrative head of said division.

As administrative head, said LCO No.

5995 1 of 3 Committee Bill No.709 commissioner shall delegate said commissioner's jurisdiction of the Division of Emergency Management and Homeland Security to a deputy commissioner.

The deputy commissioner shall possess professional training and knowledge consisting of not less than five years of managerial or strategic planning experience in matters relating to public safety, security, emergency services and emergency response.

No person possessing a record of any criminal, unlawful or unethical conduct shall be eligible for or hold such position.

Any person with any present or past political activities or financial interests that may substantially conflict with the duties of the deputy commissioner or expose such person to potential undue influence or compromise such person's ability to be entrusted with necessary state or federal security clearances or information shall be deemed unqualified for such position and shall not be eligible to hold such position.

(c) (1) There shall be within said department a Division of Cybersecurity.

The commissioner shall serve as administrative head of said division.

As administrative head, said commissioner shall delegate said commissioner's jurisdictionof the Division of Cybersecurity to a deputy commissioner.

The deputy commissioner shall possess professional training and knowledge consisting of not less than five years of managerial or strategic planning experience in matters relating to cybersecurity.

No person possessing a record of any criminal, unlawful or unethical conduct shall be eligible for or hold such position.

Any person with any present or past political activities or financial interests that may substantially conflict with the duties of the deputy commissioner or expose such person to potential undue influence or compromise such person's ability to be entrusted with necessary state or federal security clearances or information shall be deemed unqualified for such position and shall not be eligible to hold such position.

(2) The division shall (A) oversee and coordinate cybersecurity efforts among state agencies, boards, commissions and other entities, including the constituent units of the state system of higher education LCO No.

5995 2 of 3 Committee Bill No.

709 as defined in section 10a-1, and identify critical information technology infrastructure needs;

(B) assist municipalities and other political subdivisions of the state with cybersecurity efforts and coordinate state initiatives with municipalities and other political subdivisions of the state to the maximum extent possible;

(C) act as a liaison with federal government agencies, including the United States Department of Homeland Security, and share information with federal, state and local agencies as appropriate;

(D) coordinate cybersecurity initiatives with other states and the federal government;

(E) collaborate with the private sector to facilitate cybersecurity efforts, including efforts related to corporate espionage, protection of trade secrets and data privacy;

and (F) promote personal computer, mobile data and application security for persons throughout the state, including promoting public awareness of cybersecurity issues.

This act shall take effect as follows and shall amend the following sections:

Section 1 July 1, 2019 29-1b Statement of Purpose:

To create a Division of Cybersecurity within the Department of Emergency Services and Public Protection.

[Proposed deletions are enclosed in brackets.

Proposed additions are indicated by underline, not underlined.] the entire text of a bill or resolution or a section of a bill or resolution is new, it is Co-Sponsors:

ANS.B. ACT CREATING A DIVISION OF CYBER SECURITY WITHIN THE DEPARTMENT OF EMERGENCY SERVICES AND PUBLIC PROTECTION.

Be709 itLCO enactedNo. by the Senate and House of Representatives in General Assembly convened:

That5995 section3 29-1b of the3 general statutes be amended to create a Division of Cyber Security within the Department of Emergency Services and Public Protection, headed by a deputy director, to (1) oversee state cyber security, (2) coordinate cyber security initiatives with other states and the federal government, (3) coordinate cyber security efforts with the business community including for the protection of trade secrets and data privacy, and (4) promote personal computer, mobile data and application security.

Statement of Purpose:

To create a Division of Cyber Security within the Department of Emergency Services and Public Protection.