Sec. 2054.5192. CYBERSECURITY TRAINING REQUIRED: CERTAIN STATE CONTRACTORS. (a) In this section, "contractor" includes a subcontractor, officer, or employee of the contractor.
(b) A state agency shall require any contractor who has access to a state computer system or database to complete a cybersecurity training program certified under Section 2054.519 as selected by the agency.
(c) The cybersecurity training program must be completed by a contractor during the term of the contract and during any renewal period.
(d) Required completion of a cybersecurity training program must be included in the terms of a contract awarded by a state agency to a contractor.
(e) A contractor required to complete a cybersecurity training program under this section shall verify completion of the program to the contracting state agency. The person who oversees contract management for the agency shall:
(1) report the contractor's completion to the department; and
(2) periodically review agency contracts to ensure compliance with this section.
Added by Acts 2019, 86th Leg., R.S., Ch. 1308 (H.B. 3834), Sec. 3, eff. June 14, 2019.