| |
| |
|
|
A BILL TO BE ENTITLED
|
|
|
AN ACT
|
|
|
relating to the establishment of certain information sharing and |
|
|
analysis organizations by the Department of Information Resources. |
|
|
BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS: |
|
|
SECTION 1. The heading to Section 2054.0594, Government |
|
|
Code, is amended to read as follows: |
|
|
Sec. 2054.0594. INFORMATION SHARING AND ANALYSIS |
|
|
ORGANIZATIONS [ORGANIZATION]. |
|
|
SECTION 2. Section 2054.0594, Government Code, is amended |
|
|
by amending Subsections (a), (b), and (c) and adding Subsection |
|
|
(a-1) to read as follows: |
|
|
(a) The department shall establish an intrastate |
|
|
information sharing and analysis organization to provide a forum |
|
|
for state agencies, local governments, public and private |
|
|
institutions of higher education, and [the] private sector entities |
|
|
in this state to share information regarding cybersecurity threats, |
|
|
best practices, and remediation strategies. |
|
|
(a-1) The department may establish an interstate |
|
|
information sharing and analysis organization to provide a forum |
|
|
for states to share information regarding cybersecurity threats, |
|
|
best practices, and remediation strategies. |
|
|
(b) The department shall provide administrative support to |
|
|
each [the] information sharing and analysis organization |
|
|
established under this section. |
|
|
(c) A participant in an [the] information sharing and |
|
|
analysis organization established under this section shall assert |
|
|
any exception available under state or federal law, including |
|
|
Section 552.139, in response to a request for public disclosure of |
|
|
information shared through the organization. Section 552.007 does |
|
|
not apply to information described by this subsection. |
|
|
SECTION 3. This Act takes effect September 1, 2025. |