TO:	Honorable Chris Paddie, Chair, House Committee on State Affairs
FROM:	Jerry McGinty, Director, Legislative Budget Board
IN RE:	HB4071 by Shaheen (relating to the requirements for the purchase of endpoint devices by a state agency.), Committee Report 1st House, Substituted

The bill would require the Department of Information Resources (DIR) to compile a list of endpoint devices that are approved for purchase by a state agency.  DIR would also be required to annually update any list of approved endpoint devices.  The bill would authorize state agencies to purchase or lease an endpoint device only if the device meets the cybersecurity industry-recognized standards and best practices established by DIR.  It is assumed that any administrative costs to DIR associated with the bill's provisions could be absorbed using existing resources.  Several agencies, including the Office of the Attorney General, Alcoholic Beverage Commission indicated that any costs associated with the bill could be absorbed within existing resources. The Department of Transportation (TxDOT) indicated that the bill may have a minor operational impact in that once endpoint criteria are established TxDOT may need to update its catalog of approved endpoint devices, and that the costs associated with this operational impact could be absorbed within TxDOT's existing resources.

Local Government Impact

No significant fiscal implication to units of local government is anticipated.