OGSR/Cybersecurity, Information Technology, and Operational Technology Information

Summary

It adds new exemptions so that agencies can keep network schematics, login credentials, risk assessments and other security information out of public view. The exemptions apply to state departments, the Department of State, the Department of Highway Safety, local government utilities and other agencies, and they automatically expire on Oct. 2, 2026 or 2027 unless the legislature reenacts them. The law also requires agencies to conduct triennial risk assessments and maintain internal cybersecurity policies, which are themselves treated as confidential.

AI-generated summary — may be incomplete or inaccurate. Verify against the official bill text.

Topics

Share