bill to let Texas Cyber Command run threat-sharing groups

The text as introduced · 307 words

90R3906 LRM-D

By: Lalani
H.B. No. 307

A BILL TO BE ENTITLED

AN ACT

relating to the intrastate and interstate information sharing and

analysis organizations established by the Texas Cyber Command.

BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:

SECTION 1. Section 2063.201(c), Government Code, is amended

to read as follows:

(c) The center, in coordination with the digital forensics

laboratory under Section 2063.203, shall:

(1) operate each [ the ] information sharing and

analysis organization established under Section 2063.204; and

(2) provide strategic guidance to regional security

operations centers established under Subchapter G and the

cybersecurity incident response unit under Section 2063.202 to

assist governmental entities in responding to a cybersecurity

incident.

SECTION 2. The heading to Section 2063.204, Government

Code, is amended to read as follows:

Sec. 2063.204. INFORMATION SHARING AND ANALYSIS

ORGANIZATIONS [ ORGANIZATION ].

SECTION 3. Section 2063.204, Government Code, is amended by

amending Subsections (a) and (b) and adding Subsection (d) to read

as follows:

(a) The command shall establish at least one intrastate

information sharing and analysis organization to provide a forum

for state agencies, local governments, public and private

institutions of higher education, and [ the ] private sector entities

in this state to share information regarding cybersecurity threats,

best practices, and remediation strategies.

(b) A participant in an [ the ] information sharing and

analysis organization established under this section shall assert

any exception available under state or federal law, including

Section 552.139, in response to a request for public disclosure of

information shared through the organization. Section 552.007 does

not apply to information described by this subsection.

(d) The command may establish an interstate information

sharing and analysis organization to provide a forum for states to

share information regarding cybersecurity threats, best practices,

and remediation strategies.

SECTION 4. This Act takes effect September 1, 2027.