HOUSE BILL REPORT

HB 1418

This analysis was prepared by non-partisan legislative staff for the use of legislative members in their deliberations. This analysis is not a part of the legislation nor does it constitute a statement of legislative intent.

As Reported by House Committee On:

Technology & Economic Development

Title: An act relating to establishing a blue ribbon panel to address cybersecurity for different levels of government in order to protect the public good.

Brief Description: Establishing a blue ribbon panel on cybersecurity.

Sponsors: Representatives Hudgins, Smith, Ortiz-Self, Morris and Stanford.

Brief History:

Committee Activity:

Technology & Economic Development: 2/1/17, 2/14/17 [DPS].

Brief Summary of Substitute Bill

Directs the Office of the Chief Information Officer (OCIO) and the State Homeland Security Advisor to convene a blue-ribbon panel to review issues relating to cyberattack, security, and response best practices, co-chaired by the Chief Information Officer and the Director of the Military Department.
Requires the OCIO to submit a report detailing the recommendations of the panel by December 12, 2018.

HOUSE COMMITTEE ON TECHNOLOGY & ECONOMIC DEVELOPMENT

Majority Report: The substitute bill be substituted therefor and the substitute bill do pass. Signed by 17 members: Representatives Morris, Chair; Kloba, Vice Chair; Tarleton, Vice Chair; Smith, Ranking Minority Member; DeBolt, Assistant Ranking Minority Member; Doglio, Fey, Harmsworth, Hudgins, Manweller, McDonald, Nealey, Santos, Slatter, Steele, Wylie and Young.

Staff: Lily Smith (786-7175).

Background:

Office of the Chief Information Officer.

The Office of the Chief Information Officer (OCIO) is responsible for the preparation and implementation of a strategic information technology (IT) plan and enterprise architecture for the state. The OCIO works toward standardization and consolidation of IT infrastructure and establishes IT standards and policies, including state IT security policies. The OCIO also prepares a biennial state performance report on IT, evaluates current IT spending and budget requests, and oversees major IT projects.

Military Department.

The Military Department administers the state's comprehensive emergency management program. The Adjutant General, who is the Director of the Military Department, is responsible for developing a comprehensive, all-hazard emergency plan for the state that includes an analysis of natural, technological, or human-caused hazards, and procedures to coordinate local and state resources in responding to such hazards.

The Military Department is designated as the primary agency responsible for external communication with the Department of Homeland Security for significant cybersecurity incident exercises, and the Adjutant General is the senior official representing Washington in response to a significant cybersecurity incident at the state and federal levels. The Adjutant General is the Homeland Security Advisor to the Governor.

–––––––––––––––––––––––––––––––––

Summary of Substitute Bill:

The OCIO and the state Homeland Security Advisor shall convene a blue ribbon panel on cybersecurity that will review issues such as protecting critical infrastructure from the threat of cyberattack, protecting data transfer and enhancing the security of the state's intergovernmental network, and identifying best practices for local government response in the event of a cybersecurity incident. The Chief Information Officer and the Director of the Military Department will be co-chairs of the panel. The OCIO will provide staff support for the panel. The panel must publish its meeting schedule, and the OCIO must submit a report of the panel's recommendations to the Legislature, the Governor, and organizations representing local governments or utilities, by December 12, 2018.

Substitute Bill Compared to Original Bill:

The state Homeland Security Advisor is added as a convener of the blue ribbon panel along with the state Chief Information Officer. A representative from the Office of the State Auditor may participate in or observe the meetings of the blue ribbon panel.

–––––––––––––––––––––––––––––––––

Appropriation: None.

Fiscal Note: Available.

Effective Date of Substitute Bill: The bill takes effect 90 days after adjournment of the session in which the bill is passed.

Staff Summary of Public Testimony:

(In support) The panel would be an excellent way to merge common interests and make progress. The opportunity to serve on the panel would be welcome. Adding a representative from the Department of Commerce to the panel and including the Office of the State Auditor is recommended. Part-time commissioners do not have the expertise to handle these issues and they do not really fall under the state's purview. The state can help by convening existing resources to address the issue.

(Opposed) None.

Persons Testifying: Representative Hudgins, prime sponsor; William Bridges, CenturyLink; Dave Arbaugh, Snohomish Public Utility District; Joseph Williams, Department of Commerce; and Scott Nelson, Office of the State Auditor.

Persons Signed In To Testify But Not Testifying: None.