Washington State

House of Representatives

Office of Program Research

BILL

ANALYSIS

Technology & Economic Development Committee

HB 1418

This analysis was prepared by non-partisan legislative staff for the use of legislative members in their deliberations. This analysis is not a part of the legislation nor does it constitute a statement of legislative intent.

Brief Summary of Bill

Directs the Office of the Chief Information Officer (OCIO) to convene a blue ribbon panel, co-chaired by the Chief Information Officer and the Director of the Military Department, to review issues relating to cyberattack, security, and response best practices.
Requires the OCIO to submit a report detailing the panel's recommendations by December 12, 2018.

Background:

Office of the Chief Information Officer.

The Office of the Chief Information Officer (OCIO) is responsible for the preparation and implementation of a strategic information technology (IT) plan and enterprise architecture for the state. The OCIO works toward standardization and consolidation of IT infrastructure and establishes IT standards and policies, including state IT security policies. The OCIO also prepares a biennial state performance report on IT, evaluates current IT spending and budget requests, and oversees major IT projects.

Military Department.

The Military Department administers the state's comprehensive emergency management program. The Adjutant General, who is the Director of the Military Department, is responsible for developing a comprehensive, all-hazard emergency plan for the state that includes an analysis of natural, technological, or human-caused hazards, and procedures to coordinate local and state resources in responding to such hazards.

The Military Department is designated as the primary agency responsible for external communication with the Department of Homeland Security for significant cybersecurity incident exercises, and the Adjutant General is the senior official representing Washington in response to a significant cyber security incident at the state and federal levels.

Summary of Bill:

The OCIO shall convene a blue ribbon panel on cybersecurity that will review issues such as protecting critical infrastructure from the threat of cyberattack, protecting data transfer and enhancing the security of the state's intergovernmental network, and identifying best practices for local government response in the event of a cybersecurity incident. The Chief Information Officer and the Director of the Military Department will be co-chairs of the panel. The OCIO will provide staff support for the panel. The panel must publish its meeting schedule, and the OCIO must submit a report of the panel's recommendations to the Legislature, the Governor, and organizations representing local governments or utilities by December 12, 2018.