Sec. 2054.515. AGENCY INFORMATION SECURITY ASSESSMENT AND REPORT. (a) At least once every two years, each state agency shall conduct an information security assessment of the agency's information resources systems, network systems, digital data storage systems, digital data security measures, and information resources vulnerabilities.
(b) Not later than December 1 of the year in which a state agency conducts the assessment under Subsection (a), the agency shall report the results of the assessment to:
(1) the department; and
(2) on request, the governor, the lieutenant governor, and the speaker of the house of representatives.
(c) The department by rule may establish the requirements for the information security assessment and report required by this section.
Added by Acts 2017, 85th Leg., R.S., Ch. 683 (H.B. 8), Sec. 11, eff. September 1, 2017.
Amended by:
Acts 2019, 86th Leg., R.S., Ch. 573 (S.B. 241), Sec. 1.16, eff. September 1, 2019.