Tex.
Gov't Code Section 2054.515
Agency Information Security Assessment and Report
(a)
At least once every two years, each state agency shall conduct an information security assessment of the agency’s:(1)
information resources systems, network systems, digital data storage systems, digital data security measures, and information resources vulnerabilities; and(2)
data governance program with participation from the agency’s data management officer, if applicable, and in accordance with requirements established by department rule.(b)
Not later than November 15 of each even-numbered year, the agency shall report the results of the assessment to:(1)
the department; and(2)
on request, the governor, the lieutenant governor, and the speaker of the house of representatives.(b)
Not later than December 1 of the year in which a state agency conducts the assessment under Subsection (a) or the 60th day after the date the agency completes the assessment, whichever occurs first, the agency shall report the results of the assessment to:(1)
the department; and(2)
on request, the governor, the lieutenant governor, and the speaker of the house of representatives.(c)
The department by rule shall establish the requirements for the information security assessment and report required by this section.(d)
The report and all documentation related to the information security assessment and report are confidential and not subject to disclosure under Chapter 552 (Public Information). The state agency or department may redact or withhold the information as confidential under Chapter 552 (Public Information) without requesting a decision from the attorney general under Subchapter G (Request for Attorney General Decision), Chapter 552 (Public Information).
Source:
Section 2054.515 — Agency Information Security Assessment and Report, https://statutes.capitol.texas.gov/Docs/GV/htm/GV.2054.htm#2054.515 (accessed Jun. 5, 2024).
