House Status:
Senate Status:
Senate Status:
Minutes for HB2331 - Committee on Government, Technology and Security
Short Title
Enacting the Kansas cybersecurity act.
Minutes Content for Wed, Feb 15, 2017
The Chairman opened the hearing on HB2331.
Ms. Moyer briefed the Committee on the salient points of the bill (Attachment 5). She said that the bill creates the Kansas Security Office under OITS, establishes the Executive Chief Information Security Officer as well as two funds: the Cybersecurity State Fund and the Cybersecurity State Grant Fund. Oversight would be provided by the newly created Coordinating Council. The funding source will be through a fee levied by the Kansas Department of Revenue, Division of Vehicles.
Joe Acosta, Chief Information Security Officer, OITS, citing a Legislative Post Audit report on the gaps in cybersecurity, testified that the bill will mitigate risks to agencies' data by providing a centralized structure and consistent training for staff. The bill will also standardize data management and bring the state into compliance with federal regulations (Attachment 6).
Joe Norwood, Secretary, Kansas Department of Corrections, spoke as a proponent; he stated that the Department has been entrusted with personal data by Kansas' citizens, and the bill will augment that protection (Attachment 7). He cited a data breach at the federal level that resulted in significant costs and expressed gratitude for the creation of a CISO.
Adrian Guerrero, Kansas Board of Nursing, listed all the IT services provided by the Board and noted that the bill will enhance many aspects of their digital services He commented that the centralized structure and comprehensive services offered by the bill will lower costs for the agency (Attachment 8).
Charles Hunt, Director, Bureau of Epidemiology and Public Health Information, Kansas Department of Health and Environment, noting that the Health Division holds much sensitive data, said that the bill will protect this information and will also mitigate future risks (Attachment 9).
Representatives Larry Campbell and Tom Sloan provided written testimony in support of the bill (Attachment 10).
Mr. Sweden returned to speak as a neutral conferee (Attachment 4). He referenced information to show that cybersecurity is now the top priority among state IT agencies and that hackers increasingly target state systems. He emphasized the importance of a clean governance structure and for the primacy of adequate funding.
Kirk Thompson, Director, Kansas Bureau of Investigation, provided written testimony opposing the bill (Attachment 11). His objections centered around the legative fiscal impact the bill will have on the KBI and on the Kansas Criminal Justice Information System.
The hearing on HB2331 was closed.
The meeting was adjourned at 10:21 a.m. The next meeting is scheduled for Monday, February 20, 2017.
