Existing law requires a state agency to report to the Department of Technology on its compliance with specified cybersecurity strategy incident response standards no later than July 1, 2019. Existing law authorizes a local entity that receives state funds for the purposes of storing, sharing, or transmitting data, or in support of certain information technology projects, upon the request of the department, to submit a Technology Recovery Plan to the department.
This bill would state the intent of the Legislature to enact legislation that would require public agencies to meet increased data protection standards by enhancing password protection requirements and annually assessing cybersecurity responses.