SB 764

Abstract

Public bodies; security of government databases and data communications. Requires every public body to report to the Virginia Fusion Intelligence Center all known incidents that threaten the security of the Commonwealth's data or communications or result in exposure of data protected by federal or state laws and all other incidents compromising the security of the public body's information technology systems with the potential to cause major disruption to normal activities of the public body or other public bodies. The bill requires such reports to be made to the Virginia Fusion Intelligence Center within 24 hours of the discovery of the incident and that the Virginia Fusion Intelligence Center share such reports with the Chief Information Officer promptly upon receipt. The bill requires the Chief Information Officer to convene a work group to review current cybersecurity reporting and information sharing practices and report any legislative recommendations to the Governor and the Chairmen of the Senate Committee on General Laws and Technology and the House Committee on Communications, Technology and Innovation by November 15, 2022. This bill is identical to HB 1290.

Public bodies; security of government databases and data communications. Requires every public body to report to the Virginia Fusion Intelligence Center all known incidents that threaten the security of the Commonwealth's data or communications or result in exposure of data protected by federal or state laws and all other incidents compromising the security of the public body's information technology systems with the potential to cause major disruption to normal activities of the public body or other public bodies. The bill requires such reports to be made to the Virginia Fusion Intelligence Center within 24 hours of the discovery of the incident and that the Virginia Fusion Intelligence Center share such reports with the Chief Information Officer promptly upon receipt. The bill requires the Chief Information Officer to convene a work group to review current cybersecurity reporting and information sharing practices and report any legislative recommendations to the Governor and the Chairmen of the Senate Committee on General Laws and Technology and the House Committee on Communications, Technology and Innovation by November 15, 2022.

Public bodies; security of government databasesand data communications. Requires every public body to reportto the Chief Information Officer (CIO) all known incidents that threatenthe security of the Commonwealth's data or communications or resultin exposure of data protected by federal or state laws and all otherincidents compromising the security of the public body's information technology systems with the potential to cause major disruption tonormal activities of the public body or other public bodies. The bill requires such reports to be made to the CIO within 24 hoursfrom when the incident was discovered.