The bill establishes a Judicial Branch Technology Oversight Council tasked with setting standards and policies for information technology within the judicial branch, approving strategic IT plans, overseeing IT projects, and evaluating cybersecurity programs. The council will be composed of members appointed by the chief justice and will support the judicial chief information technology officer and chief information security officer. Additionally, the bill amends existing law to require the appointment of chief information security officers in various state offices, including the commissioner of insurance and the attorney general, who will develop cybersecurity programs based on the National Institute of Standards and Technology Cybersecurity Framework (CSF) 2.0. It also mandates annual cybersecurity awareness training for employees and includes provisions for the confidentiality of audit results, with certain provisions set to expire in 2030 unless reenacted.

Furthermore, the bill modifies the Kansas cybersecurity act by expanding the Information Technology Executive Council's membership from 13 to 17 voting members, including additional representatives from the Senate and House. It removes the expiration date of July 1, 2026, for certain provisions, allowing the council to operate indefinitely. The bill outlines the responsibilities of the chief information security officers, including compliance with cybersecurity standards and conducting audits, while clarifying definitions related to cybersecurity. It also establishes the position of an executive branch chief information security officer (CISO) responsible for overseeing cybersecurity across the executive branch, developing security standards, and managing protocols. The bill creates the Kansas information security office, administered by the CISO, and mandates agency heads to ensure data security and participate in statewide initiatives, while also establishing an information technology security fund for related expenditures.

Statutes affected:
As introduced: 40-110, 45-229, 75-413, 75-623, 75-710, 75-711, 75-7202, 75-3223, 75-7203, 75-7245, 75-7206a, 75-7208a, 75-7237, 75-7201, 75-7238, 75-7239, 75-7240, 76-711, 75-7246