S.B. No. 2404 seeks to amend the Government Code to enhance the operations of the Department of Information Resources (DIR) by introducing a voluntary certification course for procurement of information resources technologies and annual training for upper management at state agencies. The bill mandates the DIR to develop a certification course for individuals with purchasing or contract management certifications and requires annual training on best practices for purchasing information resources technologies. Additionally, it establishes a new governance structure for the DIR, including an 11-member board and two advisory committees focused on information security and customer service. The bill also extends the DIR's sunset provision to September 1, 2037, and clarifies definitions and training requirements for board members.

Furthermore, the bill enhances cybersecurity measures by mandating annual certified cybersecurity training for state agency employees and local government officials, as well as requiring biennial information security assessments. It introduces a Procurement Services Pilot Program to assist state agencies in procuring information resources technologies, with a report due by December 1, 2028, to evaluate its effectiveness. The bill also repeals several existing provisions related to information security and governance to streamline the regulatory framework. It is set to take effect on September 1, 2025, and includes provisions for the transition of board members and their training obligations.

Statutes affected:
Introduced: Government Code 2054.003, Government Code 61.003, Government Code 2054.021, Government Code 2054.024, Government Code 2054.033, Government Code 2054.035, Government Code 2054.036, Government Code 2054.055, Government Code 2054.075, Government Code 2054.097, Government Code 2054.2606, Government Code 2054.456, Government Code 2054.515, Government Code 2054.5191 (Government Code 2054, Government Code 61)