72:1 New Paragraphs; Department of Information Technology; Technical Committees. Amend RSA 21-R:7 by inserting after paragraph VI the following new paragraphs:

VII. Cybersecurity.

VIII. Cloud technologies or strategies.

72:2 New Section; Cybersecurity Advisory Committee. Amend RSA 21-R by inserting after section 15 the following new section:

21-R:16 Cybersecurity Advisory Committee.

I. There is hereby established the cybersecurity advisory committee (CAC) which shall be chaired by the chief information security officer.

II. The committee shall advise the commissioner or the commissioner's designee on cybersecurity concerns, promote awareness, develop effective policies and solutions, and obtain consensus on enterprise-wide initiatives that advance the cybersecurity of information assets and technology resources.

III. All executive departments and agencies shall identify and appoint an employee with cybersecurity responsibilities to spearhead agency cybersecurity matters including information security, confidentiality, privacy, and regulatory compliance, and to represent the agency on the CAC. Contributors to the CAC may include representatives with cybersecurity responsibilities from the New Hampshire National Guard, New Hampshire political subdivisions, academic institutions, and select private industry representatives as identified by the CAC.

72:3 Effective Date. This act shall take effect July 1, 2021.

Approved: June 10, 2021

Effective Date: July 01, 2021

72:1 New Paragraphs; Department of Information Technology; Technical Committees. Amend RSA 21-R:7 by inserting after paragraph VI the following new paragraphs:

VII. Cybersecurity.

VIII. Cloud technologies or strategies.

72:2 New Section; Cybersecurity Advisory Committee. Amend RSA 21-R by inserting after section 15 the following new section:

21-R:16 Cybersecurity Advisory Committee.

I. There is hereby established the cybersecurity advisory committee (CAC) which shall be chaired by the chief information security officer.

II. The committee shall advise the commissioner or the commissioner's designee on cybersecurity concerns, promote awareness, develop effective policies and solutions, and obtain consensus on enterprise-wide initiatives that advance the cybersecurity of information assets and technology resources.

III. All executive departments and agencies shall identify and appoint an employee with cybersecurity responsibilities to spearhead agency cybersecurity matters including information security, confidentiality, privacy, and regulatory compliance, and to represent the agency on the CAC. Contributors to the CAC may include representatives with cybersecurity responsibilities from the New Hampshire National Guard, New Hampshire political subdivisions, academic institutions, and select private industry representatives as identified by the CAC.

72:3 Effective Date. This act shall take effect July 1, 2021.

Approved: June 10, 2021

Effective Date: July 01, 2021