HB 1095

Abstract

Commonwealth information security requirements. Requires state public bodies, defined in the bill, to (i) comply with the Commonwealth's security policies and standards, (ii) ensure each of their employees completes information security training, (iii) conduct regular security audits, (iv) report the results of such audits to the appropriate entity, and (v) implement security monitoring and enter into memoranda of understanding with the Chief Information Officer of the Commonwealth for sharing information with the Commonwealth's central information security systems. The bill directs the Chief Information Officer of the Commonwealth to (a) publish and maintain a list of the Commonwealth's security policies and standards with which state public bodies are required to comply, (b) ensure that transition meetings with state public bodies occur, and (c) document such transitions and any exemptions from the requirements of the bill.