Amend SB 64 (house committee report) as follows:
(1) On page 1, line 5, strike "Section 61.09091" and substitute "Sections 61.09091 and 61.09092".
(2) On page 1, between lines 20 and 21, insert the following:
Sec. 61.09092. COORDINATION OF CYBERSECURITY COURSEWORK DEVELOPMENT. (a) In this section, "lower-division institution of higher education" means a public junior college, public state college, or public technical institute.
(b) The board, in consultation with the Department of Information Resources, shall coordinate with lower-division institutions of higher education and entities that administer or award postsecondary industry certifications or other workforce credentials in cybersecurity to develop certificate programs or other courses of instruction leading toward those certifications or credentials that may be offered by lower-division institutions of higher education.
(c) The board may adopt rules as necessary for the administration of this section.
(3) On page 12, line 1, strike "2054.119" and substitute "2054.119, 2054.513,".
(4) Add the following appropriately numbered SECTIONS to the bill and renumber the SECTIONS of the bill accordingly:
SECTION ____. Subchapter F, Chapter 437, Government Code, is amended by adding Section 437.255 to read as follows:
Sec. 437.255. ASSISTING TEXAS STATE GUARD WITH CYBER OPERATIONS. To serve the state and safeguard the public from malicious cyber activity, the governor may command the Texas National Guard to assist the Texas State Guard with defending the state's cyber operations.
SECTION ____. The heading to Section 656.047, Government Code, is amended to read as follows:
Sec. 656.047. PAYMENT OF PROGRAM AND CERTIFICATION EXAMINATION EXPENSES.
SECTION ____. Section 656.047, Government Code, is amended by adding Subsection (a-1) to read as follows:
(a-1) A state agency may spend public funds as appropriate to reimburse a state agency employee or administrator who serves in an information technology, cybersecurity, or other cyber-related position for fees associated with industry-recognized certification examinations.
SECTION ____. Subchapter N-1, Chapter 2054, Government Code, is amended by adding Section 2054.519 to read as follows:
Sec. 2054.519. CYBERSTAR PROGRAM; CERTIFICATE OF APPROVAL. (a) The state cybersecurity coordinator, in collaboration with the cybersecurity council and public and private entities in this state, shall develop best practices for cybersecurity that include:
(1) measureable, flexible, and voluntary cybersecurity risk management programs for public and private entities to adopt to prepare for and respond to cyber incidents that compromise the confidentiality, integrity, and availability of the entities' information systems;
(2) appropriate training and information for employees or other individuals who are most responsible for maintaining security of the entities' information systems;
(3) consistency with the National Institute of Standards and Technology standards for cybersecurity;
(4) public service announcements to encourage cybersecurity awareness; and
(5) coordination with local and state governmental entities.
(b) The state cybersecurity coordinator shall establish a cyberstar certificate program to recognize public and private entities that implement the best practices for cybersecurity developed in accordance with Subsection (a). The program must allow a public or private entity to submit to the department a form certifying that the entity has complied with the best practices and the department to issue a certificate of approval to the entity. The entity may include the certificate of approval in advertisements and other public communications.
SECTION ____. Chapter 2054, Government Code, is amended by adding Subchapter R to read as follows:
SUBCHAPTER R. INFORMATION RESOURCES OF GOVERNMENTAL ENTITIES
Sec. 2054.601. USE OF NEXT GENERATION TECHNOLOGY. Each state agency and local government shall, in the administration of the agency or local government, consider using next generation technologies, including cryptocurrency, blockchain technology, and artificial intelligence.
Sec. 2054.602. LIABILITY EXEMPTION. A person who in good faith discloses to a state agency or other governmental entity information regarding a potential security issue with respect to the agency's or entity's information resources technologies is not liable for any civil damages resulting from disclosing the information unless the person stole, retained, or sold any data obtained as a result of the security issue.