FINAL BILL REPORT

ESSB 6528

This analysis was prepared by non-partisan legislative staff for the use of legislative members in their deliberations. This analysis is not a part of the legislation nor does it constitute a statement of legislative intent.

PARTIAL VETO

C 237 L 16

Synopsis as Enacted

Brief Description: Enacting the cybersecurity jobs act of 2016.

Sponsors: Senate Committee on Trade & Economic Development (originally sponsored by Senators Brown, Sheldon, Dammeier, Parlette, Schoesler, Warnick, Honeyford, Braun, Angel, Hewitt, Miloscia, O'Ban, Becker, Rivers and Rolfes).

Senate Committee on Trade & Economic Development

House Committee on Technology & Economic Development

House Committee on General Government & Information Technology

Background: The Office of the Chief Information Officer (OCIO) is responsible for the preparation and implementation of a strategic information technology (IT) plan and enterprise architecture for the state. The OCIO's duties include standardization and consolidation of IT infrastructure and establishment of IT standards and policies, including state IT security and cybersecurity policies.

Summary: The OCIO must implement a process for detecting and responding to security incidents. Security incidents include accidental or deliberate events that result in unauthorized access, loss, disruption, or destruction of communication and IT resources. The OCIO must develop plans and procedures to ensure the continuity of operations for IT resources in the event of a security incident.

The OCIO must work with the Department of Commerce and other economic development stakeholders to facilitate the development of a strategy that includes key local, state, and federal assets that will make Washington a national leader in cybersecurity. The OCIO must collaborate with community colleges, universities, the National Guard, the Department of Defense, the Department of Energy, and national laboratories to develop the strategy. The OCIO must establish performance metrics to measure periodically the state's performance in achieving the Cybersecurity Jobs Act's goal of making Washington a national leader in cybersecurity. Before December 1, 2020, the OCIO must report to the Legislature on the state's performance in achieving these metrics and any recommendations for different metrics if necessary. The act is known and cited as the Cybersecurity Jobs Act.

Votes on Final Passage:

Senate

49

0

House

95

0

(House amended)

Senate

47

0

(Senate concurred)

Effective:

June 9, 2016

Partial Veto Summary: The Governor vetoed the intent section of the bill that describes the importance of protecting the state's communication and information resources and provides direction for the state to become a national leader in cybersecurity.