SB 448 — Agency for State Technology

Florida Senate - 2018 CS for SB 448 By Senatorthe BrandesCommittee 24-00700-18on 2018448__Governmental AOversight billand toAccountability; be entitled An act relating to the Agency for State Technology;

and Senator Brandes 585-02375-18 2018448c1 A bill to be entitled An act relating to the Agency for State Technology;

282.0041, F.S.;

revising definitions of the terms “breach” and “incident”;

amending s.

reenacting s.

943.0415(2) and (3), F.S., relating to the Cybercrime Office within the Department of Law Enforcement, to incorporate the amendment made to s.

282.0041, F.S., in references thereto;

2620 Be It Enacted by the Legislature of the State of Florida:

2822 Section 1. Subsections1. Subsection (2)(18) and (10) of section 282.0041,282.0051, Florida Statutes, areis amended to read:

282.0041 Definitions.—As used in this chapter, the term:

(2) “Breach” has the same meaning as provided in s.

501.171(1) means a confirmed event that compromises the confidentiality, integrity, or availability of information or data.

(10) “Incident” means a violation or imminent threat of violation, whether such violation is accidental or deliberate, of information technology resources, security policies, acceptable use policies, or standard security practices.

An imminent threat of violation refers to a situation in which the state agency has a factual basis for believing that a specific incident is about to occur.

Section 2. Subsection (18) of section 282.0051, Florida Statutes, is amended to read:

Section 3. Paragraph2. Paragraph (d) of subsection (2) of section 282.201, Florida Statutes, is amended, paragraph (g) is added to that subsection, and subsection (4) of that section is amended, to read:

Section 4. For3. This the purpose of incorporating the amendment made by this act toshall sectiontake 282.0041,effect FloridaJuly Statutes,1, in2018. references thereto, subsections (2) and (3) of section 943.0415, Florida Statutes, are reenacted to read:

943.0415 Cybercrime Office.—There is created within the Department of Law Enforcement the Cybercrime Office.

The office may:

(2) Monitor state information technology resources and provide analysis on information technology security incidents, threats, and breaches as defined in s.

282.0041.

(3) Investigate violations of state law pertaining to information technology security incidents pursuant to s.

282.0041 and assist in incident response and recovery.

Section 5. This act shall take effect July 1, 2018.