HJ 64

Abstract

Study; Virginia Information Technologies Agency;ransomware attack preparedness; report. Requests the VirginiaInformation Technologies Agency (VITA) to study the Commonwealth'ssusceptibility, preparedness, and ability to respond to ransomwareattacks. In conducting its study, the Agency shall (i) assess theCommonwealth's susceptibility to ransomware attacks at the stateand local levels of government; (ii) develop guidelines and bestpractices to prevent ransomware attacks; (iii) evaluate current dataencryption and backup strategies; (iv) evaluate the availabilityof tools to monitor unusual access requests, viruses, and networktraffic; (v) develop guidance for state agencies and localities onresponding in the event of a ransomware attack; (vi) develop a coordinatedlaw-enforcement response strategy that utilizes forensic investigativetechniques to identify the source of ransomware attacks; and (vii) provide recommendations on legislative or regulatory changes to betterprotect state and local government entities from ransomware. Thebill requires VITA to report its findings to the Governor and theGeneral Assembly no later than the first day of the 2021 RegularSession.