Concerning the protection of critical constituent and state operational data against the financial and personal harm caused by ransomware and other malicious cyber activities.
Summary
Requires the Office of the Chief Information Officer (OCIO) to design, develop, and implement enterprise technology standards for malware and ransomware protection, backup, and recovery.
Requires the OCIO to establish a ransomware education and outreach program to educate employees of public agencies on the prevention, response, and remediation of ransomware.
Requires certain state agencies to perform an assessment of their applications and resources containing data and provide the OCIO with a confidential list of prioritized applications based on mission criticality and impact to constituents in the event of system failure or data loss.
Requires various reporting by the OCIO on information relating to mission critical applications, business essential applications, the status of immutable backups for each application, and the breadth of threat landscape.
From the Second Substitute House Bill Report (2SHB 2044), written by the Legislature's nonpartisan staff. Read the full report ↗
Did not passDid not pass · passed House, stalled in Senate
AN ACT Relating to the protection of critical constituent and state operational data against the financial and personal harm caused by ransomware and other malicious cyber activities;