Bill Text: TX SB1597 | 2013-2014 | 83rd Legislature | Enrolled
Bill Title: Relating to the development of state agency information security plans.
Sponsorship: Bipartisan Bill
Status: (Passed) 2013-06-14 - Effective on 9/1/13 [SB1597 Detail]
Download: Texas-2013-SB1597-Enrolled.html
| S.B. No. 1597 | ||
|
|
||
| relating to the development of state agency information security | ||
| plans. | ||
| BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS: | ||
| SECTION 1. Subchapter F, Chapter 2054, Government Code, is | ||
| amended by adding Section 2054.133 to read as follows: | ||
| Sec. 2054.133. INFORMATION SECURITY PLAN. (a) Each state | ||
| agency shall develop, and periodically update, an information | ||
| security plan for protecting the security of the agency's | ||
| information. | ||
| (b) In developing the plan, the state agency shall: | ||
| (1) consider any vulnerability report prepared under | ||
| Section 2054.077 for the agency; | ||
| (2) incorporate the network security services | ||
| provided by the department to the agency under Chapter 2059; | ||
| (3) identify and define the responsibilities of agency | ||
| staff who produce, access, use, or serve as custodians of the | ||
| agency's information; | ||
| (4) identify risk management and other measures taken | ||
| to protect the agency's information from unauthorized access, | ||
| disclosure, modification, or destruction; | ||
| (5) include: | ||
| (A) the best practices for information security | ||
| developed by the department; or | ||
| (B) a written explanation of why the best | ||
| practices are not sufficient for the agency's security; and | ||
| (6) omit from any written copies of the plan | ||
| information that could expose vulnerabilities in the agency's | ||
| network or online systems. | ||
| (c) Not later than October 15 of each even-numbered year, | ||
| each state agency shall submit a copy of the agency's information | ||
| security plan to the department. | ||
| (d) Each state agency's information security plan is | ||
| confidential and exempt from disclosure under Chapter 552. | ||
| SECTION 2. Not later than October 15, 2014, each state | ||
| agency shall develop and submit the information security plan | ||
| required by Section 2054.133, Government Code, as added by this | ||
| Act. | ||
| SECTION 3. This Act takes effect September 1, 2013. | ||
| ______________________________ | ______________________________ | |
| President of the Senate | Speaker of the House | |
| I hereby certify that S.B. No. 1597 passed the Senate on | ||
| April 11, 2013, by the following vote: Yeas 31, Nays 0. | ||
| ______________________________ | ||
| Secretary of the Senate | ||
| I hereby certify that S.B. No. 1597 passed the House on | ||
| May 22, 2013, by the following vote: Yeas 148, Nays 0, two | ||
| present not voting. | ||
| ______________________________ | ||
| Chief Clerk of the House | ||
| Approved: | ||
| ______________________________ | ||
| Date | ||
| ______________________________ | ||
| Governor | ||
