HB1552 (2014) Detail

Establishing a commission to study cyber security for critical state infrastructure.


HB 1552 – AS INTRODUCED

2014 SESSION

14-2572

05/08

HOUSE BILL 1552

AN ACT establishing a commission to study cyber security for critical state infrastructure.

SPONSORS: Rep. Murotake, Hills 32; Rep. Pastor, Graf 12; Rep. Rappaport, Coos 1; Rep.?Sandblade, Hills 18; Rep. J. Kelley, Hills 32; Rep. Wright, Carr 8; Sen.?D'Allesandro, Dist 20

COMMITTEE: Executive Departments and Administration

ANALYSIS

This bill establishes a commission to study cyber security for critical state infrastructure.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Explanation: Matter added to current law appears in bold italics.

Matter removed from current law appears [in brackets and struckthrough.]

Matter which is either (a) all new or (b) repealed and reenacted appears in regular type.

14-2572

05/08

STATE OF NEW HAMPSHIRE

In the Year of Our Lord Two Thousand Fourteen

AN ACT establishing a commission to study cyber security for critical state infrastructure.

Be it Enacted by the Senate and House of Representatives in General Court convened:

1 New Chapter; Cyber Security Oversight Commission. Amend RSA by inserting after chapter 651-F the following new chapter:

CHAPTER 651-G

CYBER SECURITY OVERSIGHT COMMISSION

651-G:1 Cyber Security Oversight Commission Established. There is established a commission to study cyber security for critical state infrastructure.

I.(a) The members of the commission shall be as follows:

(1) Three members of the house of representatives, appointed by the speaker of the house of representatives, one of whom shall be from the criminal justice and public safety committee, one of whom shall be from the public works and highways committee, and one of whom shall be from the science, technology, and energy committee.

(2) One member of the senate, appointed by the president of the senate.

(3) The commissioner of the department of safety, or designee.

(4) The commissioner of the department of information technology, or designee.

(5) The chairperson of the public utilities commission, or designee.

(b) The commission may solicit input from subject matter experts within the fields of cyber security, information technology, critical infrastructure, or any other individual or organization with information or expertise relevant to the commission’s study.

(c) The commission shall meet at least once in Manchester, at least once in Nashua, and at least once in Portsmouth.

(d) Members of the commission shall serve without compensation; except that legislative members shall receive mileage at the legislative rate when attending to the duties of the commission.

II. The commission shall:

(a) Hold public hearings and ensure coordination between the legislative and executive branches including: the state critical infrastructure protection program (SCIPP) within the department of safety; the cyber security office within the department of information technology (DoIT); the house committees on criminal justice and public safety, public works and highways, and science technology and energy; and the senate committee on energy and natural resources.

(b) Study and develop an outline of a cyber security infrastructure protection program examining the role of state policy in ensuring adequate cyber security for state-owned and state-based infrastructure, including data and communication systems, banking and financial records, natural gas, water systems, and the electrical grid.

(c) Identify opportunities to enhance the state-federal partnership to address cyber security challenges.

(d) Identify non-state funding, sources, such as federal grants and industry-funded grant programs, to improve the state’s cyber security infrastructure program.

III. The members of the commission shall elect a chairperson from among the members. The first meeting of the commission shall be called by the first-named house member. The first meeting of the commission shall be held within 45 days of the effective date of this section. Four members of the commission shall constitute a quorum.

IV. The commission shall report its findings and any recommendations for proposed legislation to the speaker of the house of representatives, the president of the senate, the house clerk, the senate clerk, the governor, and the state library within 120 days of passage of this section.

2 Repeal. RSA 651-G, relative to the cyber security oversight commission, is repealed.

3 Effective Date.

I. Section 2 of this act shall take effect January 1, 2015.

II. The remainder of this act shall take effect upon its passage.