Amend HB 3834 (senate committee printing) in SECTION 3 of the bill as follows:
(1) In added Section 2054.519(b), Government Code (page 2, lines 12-13), strike "include activities, case studies, hypothetical situations, and other methods that".
(2) In added Section 2054.519, Government Code (page 2, between lines 17 and 18), add the following appropriately lettered subsection, reletter subsequent subsections of the section accordingly, and conform any cross-references to those provisions:
( ) The department may identify and certify under Subsection (a) training programs provided by state agencies and local governments that satisfy the training requirements described by Subsection (b).
(3) Strike added Sections 2054.5191(a) and (a-1), Government Code (page 2, lines 29-37), and substitute the following:
(a) Each state agency shall identify state employees who use a computer to complete at least 25 percent of the employee's required duties. At least once each year, an employee identified by the state agency and each elected or appointed officer of the agency shall complete a cybersecurity training program certified under Section 2054.519.
(a-1) At least once each year, a local government shall identify local government employees who have access to a local government computer system or database and require those employees and elected officials of the local government to complete a cybersecurity training program certified under Section 2054.519 or offered under Section 2054.519(e).
(4) In added Section 2054.5191(d), Government Code (page 2, lines 54-55), strike "audit the agency to ensure compliance with this section and send the results to the department" and substitute "require an internal review of the agency to ensure compliance with this section".
(5) In added Section 2054.5192(e), Government Code (page 3, lines 2-3), strike "agency's contract manager" and substitute "person who oversees contract management for the agency".
(6) In added Section 2054.5192(e)(2), Government Code (page 3, line 6), strike "conduct periodic audits" and substitute "periodically review agency contracts".