SENATE BILL REPORT

SB 6528

This analysis was prepared by non-partisan legislative staff for the use of legislative members in their deliberations. This analysis is not a part of the legislation nor does it constitute a statement of legislative intent.

As Reported by Senate Committee On:

Trade & Economic Development, January 27, 2016

Title: An act relating to promoting economic development through protection of information technology resources.

Brief Description: Enacting the cybersecurity jobs act.

Sponsors: Senators Brown, Sheldon, Dammeier, Parlette, Schoesler, Warnick, Honeyford, Braun, Angel, Hewitt, Miloscia, O'Ban, Becker, Rivers and Rolfes.

Brief History:

Committee Activity: Trade & Economic Development: 1/27/16, 1/27/16 [DPS].

SENATE COMMITTEE ON TRADE & ECONOMIC DEVELOPMENT

Majority Report: That Substitute Senate Bill No. 6528 be substituted therefor, and the substitute bill do pass.

Signed by Senators Brown, Chair; Braun, Vice Chair; Chase, Ranking Minority Member; Angel, Ericksen and McCoy.

Staff: Jeff Olsen (786-7428)

Background: The Office of the Chief Information Officer (OCIO) is responsible for the preparation and implementation of a strategic information technology (IT) plan and enterprise architecture for the state. The OCIO's duties include standardization and consolidation of IT infrastructure and establishment of IT standards and policies, including state IT security and cybersecurity policies.

Summary of Bill (Recommended Substitute): The OCIO must implement a process for detecting and responding to security incidents. Security incidents include accidental or deliberate events that result in unauthorized access, loss, disruption, or destruction of communication and IT resources. The OCIO must develop plans and procedures to ensure the continuity of operations for IT resources in the event of a security incident.

The OCIO must work with the Department of Commerce and other economic development stakeholders to facilitate the development of Washington as a national leader in cybersecurity. The act is known and cited as the Cybersecurity Jobs Act.

EFFECT OF CHANGES MADE BY TRADE & ECONOMIC DEVELOPMENT COMMITTEE (Recommended Substitute): The substitute bill specifies that the OCIO must develop plans for continuity of commerce in the event of a security incident for operations of state agencies.

Appropriation: None.

Fiscal Note: Available.

Committee/Commission/Task Force Created: No.

Effective Date: Ninety days after adjournment of session in which bill is passed.

Staff Summary of Public Testimony on Original Bill: PRO: F5 Networks is located in Washington, is a world leader in cybersecurity, and wants to offer its expertise and be a partner with the state in its cybersecurity efforts.

OTHER: The OCIO is mostly in support of the concepts in the bill and has provided a few minor technical changes to clarify that the OCIO authority is for state agencies.

Persons Testifying on Original Bill: PRO: Tim Schellberg, F5 Networks.

OTHER: Michael Cockrill, Director, Washington Technology Services.

Persons Signed In To Testify But Not Testifying: No One.