HOUSE OF REPRESENTATIVES

H.B. NO.

2003

TWENTY-SEVENTH LEGISLATURE, 2014

H.D. 1

STATE OF HAWAII

S.D. 1

 

 

 

 

 

A BILL FOR AN ACT

 

 

RELATING TO CYBERSECURITY.

 

 

BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF HAWAII:

 


     SECTION 1.  The legislature finds that implementing effective cybersecurity measures is a challenge faced by all states.  The legislature also finds that the coordination of resources between the state department of defense, the University of Hawaii, the private and public sector, and the office of information technology is needed to define the requirements to improve cybersecurity and cyber resiliency in the State and develop responses to cyber-attacks.

     The legislature further finds that cybersecurity and cyber resiliency encompass a broad array of security issues, including natural disasters and acts of terrorism, which can have a substantial impact on the critical infrastructure of the State resulting in a negative impact on the State's economy.

     The purpose of this Act is to establish a Hawaii cybersecurity, economic, education, and infrastructure security coordinator to coordinate efforts to recommend improvements to the State's cybersecurity leading to overall cyber resiliency and to define requirements for securing state, federal, and private moneys to fund cybersecurity and cyber resiliency improvements in the sectors of power, water, communications, transportation, and finance.

     SECTION 2.  Chapter 128, Hawaii Revised Statutes, is amended by adding a new section to be appropriately designated and to read as follows:

     "§128-     Cybersecurity, economic, education, and infrastructure security coordinator; powers and duties.  (a)  There is established the full-time Hawaii cybersecurity, economic, education, and infrastructure security coordinator to oversee cybersecurity and cyber resiliency matters, including cybersecurity, economic, education, and infrastructure security for the State.  The coordinator shall be placed within the state department of defense.

     (b)  The coordinator shall be selected by the state adjutant general based on the recommendations of the various agencies, departments, and private entities that will partner with the coordinator.

     (c)  The coordinator shall partner with representatives from the following entities:

     (1)  The Hawaii fusion center;

     (2)  The Hawaii state cyber resiliency center;

     (3)  Federal government agencies;

     (4)  State government agencies;

     (5)  The counties of the State;

     (6)  Institutions of higher education; and

     (7)  Other entities within the power, water, communications, transportation, and finance sectors, including public utilities, private telecommunications companies, airlines, financial institutions, and private information technology companies.

     (d)  The coordinator, through its various partnerships, shall develop the requirements and methods for:

     (1)  Improving cyber resiliency within the State through the development of a structure that shall include education, cybersecurity, and critical infrastructure protection;

     (2)  Improving the State's critical infrastructure network and resiliency, including identifying interdependencies of critical infrastructures, points of connection between critical infrastructures, the most critical nodes, and the cascading effects of a cyber-attack on these points of connection between critical infrastructure;

     (3)  Improving the State's cybersecurity by using existing resources within the State;

     (4)  Examining specific requirements and actions to accelerate the growth of the cybersecurity industry in the State;

     (5)  Defining the requirements and opportunities to secure state, federal, and private moneys for cybersecurity activities and related educational programs;

     (6)  Forming partnerships to implement cyber resiliency structures and protocol to identify and share information about possible cyber-attacks and mitigate damage and recover quickly and efficiently from cyber-attacks; and

     (7)  Expanding the State's cybersecurity and cyber resiliency understanding and workforce through education.

     (e)  The coordinator may request the assistance of other departments, agencies, and private companies, both inside and outside of the State to carry out its duties.

     (f)  For the purposes of this section:

     "Coordinator" shall mean the Hawaii cybersecurity, economic, education, and infrastructure security coordinator.

     "Cyber resiliency" shall mean the ability to complete vulnerability assessments, identify potential cyber-attacks, mitigate losses from cyber-attacks, and recover quickly and efficiently from cyber-attacks."

     SECTION 3.  The Hawaii cybersecurity, economic, education, and infrastructure security coordinator shall submit to the legislature a report of its findings, recommendations, and proposed legislation in connection with the conduct of the coordinator's duties under section 128-   (d), Hawaii Revised Statutes, no later than twenty days prior to the convening of the regular session of 2015.

     SECTION 4.  There is appropriated out of the general revenues of the State of Hawaii the sum of $         or so much thereof as may be necessary for fiscal year 2014-2015 for the salary of the Hawaii cybersecurity, economic, education, and infrastructure security coordinator and operating expenses associated with the coordinator.

     The sum appropriated shall be expended by the state department of defense for the purposes of this Act.

     SECTION 5.  New statutory material is underscored.

     SECTION 6.  This Act shall take effect on July 1, 2050.


 


 

Report Title:

Cybersecurity; Coordinator; Established

 

Description:

Establishes the Hawaii cybersecurity, economic, education, and infrastructure security coordinator to assist with the development of methods to improve the State's cybersecurity and cyber resiliency.  Appropriates funds.  Effective 7/1/2050.  (SD1)

 

 

 

The summary description of legislation appearing on this page is for informational purposes only and is not legislation or evidence of legislative intent.