Texas Government Code

Sec. § 2054.519
State Certified Cybersecurity Training Programs

(a)

The department, in consultation with the cybersecurity council established under Section 2054.512 (Cybersecurity Council) and industry stakeholders, shall annually:

(1)

certify at least five cybersecurity training programs for state and local government employees; and

(2)

update standards for maintenance of certification by the cybersecurity training programs under this section.

(b)

To be certified under Subsection (a), a cybersecurity training program must:

(1)

focus on forming information security habits and procedures that protect information resources; and

(2)

teach best practices for detecting, assessing, reporting, and addressing information security threats.

(c)

The department may identify and certify under Subsection (a) training programs provided by state agencies and local governments that satisfy the training requirements described by Subsection (b).

(d)

The department may contract with an independent third party to certify cybersecurity training programs under this section.

(e)

The department shall annually publish on the department’s Internet website the list of cybersecurity training programs certified under this section.

(f)

Notwithstanding Subsection (a), a local government that employs a dedicated information resources cybersecurity officer may offer to its employees a cybersecurity training program that satisfies the requirements described by Subsection (b).
Added by Acts 2019, 86th Leg., R.S., Ch. 1308 (H.B. 3834), Sec. 3, eff. June 14, 2019.

(1)

measureable, flexible, and voluntary cybersecurity risk management programs for public and private entities to adopt to prepare for and respond to cyber incidents that compromise the confidentiality, integrity, and availability of the entities’ information systems;

(2)

appropriate training and information for employees or other individuals who are most responsible for maintaining security of the entities’ information systems;

(3)

consistency with the National Institute of Standards and Technology standards for cybersecurity;

(4)

public service announcements to encourage cybersecurity awareness; and

(5)

coordination with local and state governmental entities.

(b)

The state cybersecurity coordinator shall establish a cyberstar certificate program to recognize public and private entities that implement the best practices for cybersecurity developed in accordance with Subsection (a). The program must allow a public or private entity to submit to the department a form certifying that the entity has complied with the best practices and the department to issue a certificate of approval to the entity. The entity may include the certificate of approval in advertisements and other public communications.
Added by Acts 2019, 86th Leg., R.S., Ch. 509 (S.B. 64), Sec. 17, eff. September 1, 2019.
Source

Last accessed
Jun. 7, 2021

REMOVE ADS