reglab/statecodes huggingface dataset:
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter N. -1. Cybersecurity › Section 2054.518. Cybersecurity Risks and Incidents

Sec. 2054.518.  CYBERSECURITY RISKS AND INCIDENTS.
(a)  The department shall develop a plan to address cybersecurity risks and incidents in this state.  The department may enter into an agreement with a national organization, including the National Cybersecurity Preparedness Consortium, to support the department's efforts in implementing the components of the plan for which the department lacks resources to address internally.  The agreement may include provisions for:
(1)   providing technical assistance services to support preparedness for and response to cybersecurity risks and incidents;
(2)   conducting cybersecurity simulation exercises for state agencies to encourage coordination in defending against and responding to cybersecurity risks and incidents;
(3)   assisting state agencies in developing cybersecurity information-sharing programs to disseminate information related to cybersecurity risks and incidents; and
(4)   incorporating cybersecurity risk and incident prevention and response methods into existing state emergency plans, including continuity of operation plans and incident response plans.
(b)  In implementing the provisions of the agreement prescribed by Subsection (a), the department shall seek to prevent unnecessary duplication of existing programs or efforts of the department or another state agency.
(c)  Repealed by Acts 2019, 86th Leg., R.S., Ch. 1308 (H.B. 3834), Sec. 4, eff. June 14, 2019.
(d)  The department shall consult with institutions of higher education in this state when appropriate based on an institution's expertise in addressing specific cybersecurity risks and incidents.
Added by Acts 2017, 85th Leg., R.S., Ch. 683 (H.B. 8), Sec. 11, eff. September 1, 2017.
Amended by:
Acts 2019, 86th Leg., R.S., Ch. 1308 (H.B. 3834), Sec. 2, eff. June 14, 2019.
Acts 2019, 86th Leg., R.S., Ch. 1308 (H.B. 3834), Sec. 4, eff. June 14, 2019.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter N. -1. Cybersecurity › Section 2054.5181. Cyberstar Program; Certificate of Approval

Sec. 2054.5181.  CYBERSTAR PROGRAM; CERTIFICATE OF APPROVAL.  (a)  The state cybersecurity coordinator, in collaboration with the cybersecurity council and public and private entities in this state, shall develop best practices for cybersecurity that include:
(1)  measureable, flexible, and voluntary cybersecurity risk management programs for public and private entities to adopt to prepare for and respond to cyber incidents that compromise the confidentiality, integrity, and availability of the entities' information systems;
(2)  appropriate training and information for employees or other individuals who are most responsible for maintaining security of the entities' information systems;
(3)  consistency with the National Institute of Standards and Technology standards for cybersecurity;
(4)  public service announcements to encourage cybersecurity awareness; and
(5)  coordination with local and state governmental entities.
(b)  The state cybersecurity coordinator shall establish a cyberstar certificate program to recognize public and private entities that implement the best practices for cybersecurity developed in accordance with Subsection (a).  The program must allow a public or private entity to submit to the department a form certifying that the entity has complied with the best practices and the department to issue a certificate of approval to the entity.  The entity may include the certificate of approval in advertisements and other public communications.
Added by Acts 2019, 86th Leg., R.S., Ch. 509 (S.B. 64), Sec. 17, eff. September 1, 2019.
Redesignated from Government Code, Section 2054.519 by Acts 2021, 87th Leg., R.S., Ch. 915 (H.B. 3607), Sec. 21.001(49), eff. September 1, 2021.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter N. -1. Cybersecurity › Section 2054.519. State Certified Cybersecurity Training Programs

Sec. 2054.519.  STATE CERTIFIED CYBERSECURITY TRAINING PROGRAMS.  (a)  The department, in consultation with the cybersecurity council established under Section 2054.512 and industry stakeholders, shall annually:
(1)  certify at least five cybersecurity training programs for state and local government employees; and
(2)  update standards for maintenance of certification by the cybersecurity training programs under this section.
(b)  To be certified under Subsection (a), a cybersecurity training program must:
(1)  focus on forming information security habits and procedures that protect information resources; and
(2)  teach best practices for detecting, assessing, reporting, and addressing information security threats.
(c)  The department may identify and certify under Subsection (a) training programs provided by state agencies and local governments that satisfy the training requirements described by Subsection (b).
(d)  The department may contract with an independent third party to certify cybersecurity training programs under this section.
(e)  The department shall annually publish on the department's Internet website the list of cybersecurity training programs certified under this section.
(f)  Repealed by Acts 2021, 87th Leg., R.S., Ch. 51 (H.B. 1118), Sec. 5, eff. May 18, 2021.
Added by Acts 2019, 86th Leg., R.S., Ch. 1308 (H.B. 3834), Sec. 3, eff. June 14, 2019.
Amended by:
Acts 2021, 87th Leg., R.S., Ch. 51 (H.B. 1118), Sec. 5, eff. May 18, 2021.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter N. -1. Cybersecurity › Section 2054.5192. Cybersecurity Training Required: Certain State Contractors

Sec. 2054.5192.  CYBERSECURITY TRAINING REQUIRED: CERTAIN STATE CONTRACTORS.  (a)  In this section, "contractor" includes a subcontractor, officer, or employee of the contractor.
(b)  A state agency shall require any contractor who has access to a state computer system or database to complete a cybersecurity training program certified under Section 2054.519 as selected by the agency.
(c)  The cybersecurity training program must be completed by a contractor during the term of the contract and during any renewal period.
(d)  Required completion of a cybersecurity training program must be included in the terms of a contract awarded by a state agency to a contractor.
(e)  A contractor required to complete a cybersecurity training program under this section shall verify completion of the program to the contracting state agency.  The person who oversees contract management for the agency shall:
(1)  not later than August 31 of each year, report the contractor's completion to the department; and
(2)  periodically review agency contracts to ensure compliance with this section.
Added by Acts 2019, 86th Leg., R.S., Ch. 1308 (H.B. 3834), Sec. 3, eff. June 14, 2019.
Amended by:
Acts 2021, 87th Leg., R.S., Ch. 856 (S.B. 800), Sec. 12, eff. September 1, 2021.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter N. -2. Texas Volunteer Incident Response Team › Section 2054.52001. Definitions

Sec. 2054.52001.  DEFINITIONS.  In this subchapter:
(1)  "Incident response team" means the Texas volunteer incident response team established under Section 2054.52002.
(2)  "Participating entity" means a state agency, including an institution of higher education, or a local government that receives assistance under this subchapter during a cybersecurity event.
(3)  "Volunteer" means an individual who provides rapid response assistance during a cybersecurity event under this subchapter.
Added by Acts 2021, 87th Leg., R.S., Ch. 567 (S.B. 475), Sec. 6, eff. June 14, 2021.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter N. -2. Texas Volunteer Incident Response Team › Section 2054.52002. Establishment of Texas Volunteer Incident Response Team

Sec. 2054.52002.  ESTABLISHMENT OF TEXAS VOLUNTEER INCIDENT RESPONSE TEAM.  (a)  The department shall establish the Texas volunteer incident response team to provide rapid response assistance to a participating entity under the department's direction during a cybersecurity event.
(b)  The department shall prescribe eligibility criteria for participation as a volunteer member of the incident response team, including a requirement that each volunteer have expertise in addressing cybersecurity events.
Added by Acts 2021, 87th Leg., R.S., Ch. 567 (S.B. 475), Sec. 6, eff. June 14, 2021.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter N. -2. Texas Volunteer Incident Response Team › Section 2054.52003. Contract With Volunteers

Sec. 2054.52003.  CONTRACT WITH VOLUNTEERS.  The department shall enter into a contract with each volunteer the department approves to provide rapid response assistance under this subchapter.  The contract must require the volunteer to:
(1)  acknowledge the confidentiality of information required by Section 2054.52010;
(2)  protect all confidential information from disclosure;
(3)  avoid conflicts of interest that might arise in a deployment under this subchapter;
(4)  comply with department security policies and procedures regarding information resources technologies;
(5)  consent to background screening required by the department; and
(6)  attest to the volunteer's satisfaction of any eligibility criteria established by the department.
Added by Acts 2021, 87th Leg., R.S., Ch. 567 (S.B. 475), Sec. 6, eff. June 14, 2021.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter N. -2. Texas Volunteer Incident Response Team › Section 2054.52004. Volunteer Qualification

Sec. 2054.52004.  VOLUNTEER QUALIFICATION.  (a)  The department shall require criminal history record information for each individual who accepts an invitation to become a volunteer.
(b)  The department may request other information relevant to the individual's qualification and fitness to serve as a volunteer.
(c)  The department has sole discretion to determine whether an individual is qualified to serve as a volunteer.
Added by Acts 2021, 87th Leg., R.S., Ch. 567 (S.B. 475), Sec. 6, eff. June 14, 2021.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter N. -2. Texas Volunteer Incident Response Team › Section 2054.52005. Deployment

Sec. 2054.52005.  DEPLOYMENT.  (a)  In response to a cybersecurity event that affects multiple participating entities or a declaration by the governor of a state of disaster caused by a cybersecurity event, the department on request of a participating entity may deploy volunteers and provide rapid response assistance under the department's direction and the managed security services framework established under Section 2054.0594(d) to assist with the event.
(b)  A volunteer may only accept a deployment under this subchapter in writing.  A volunteer may decline to accept a deployment for any reason.
Added by Acts 2021, 87th Leg., R.S., Ch. 567 (S.B. 475), Sec. 6, eff. June 14, 2021.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter N. -2. Texas Volunteer Incident Response Team › Section 2054.52006. Cybersecurity Council Duties

Sec. 2054.52006.  CYBERSECURITY COUNCIL DUTIES.  The cybersecurity council established under Section 2054.512 shall review and make recommendations to the department regarding the policies and procedures used by the department to implement this subchapter.  The department may consult with the council to implement and administer this subchapter.
Added by Acts 2021, 87th Leg., R.S., Ch. 567 (S.B. 475), Sec. 6, eff. June 14, 2021.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter N. -2. Texas Volunteer Incident Response Team › Section 2054.52007. Department Powers and Duties

Sec. 2054.52007.  DEPARTMENT POWERS AND DUTIES.  (a)  The department shall:
(1)  approve the incident response tools the incident response team may use in responding to a cybersecurity event;
(2)  establish the eligibility criteria an individual must meet to become a volunteer;
(3)  develop and publish guidelines for operation of the incident response team, including the:
(A)  standards and procedures the department uses to determine whether an individual is eligible to serve as a volunteer;
(B)  process for an individual to apply for and accept incident response team membership;
(C)  requirements for a participating entity to receive assistance from the incident response team; and
(D)  process for a participating entity to request and obtain the assistance of the incident response team; and
(4)  adopt rules necessary to implement this subchapter.
(b)  The department may require a participating entity to enter into a contract as a condition for obtaining assistance from the incident response team.  The contract must comply with the requirements of Chapters 771 and 791.
(c)  The department may provide appropriate training to prospective and approved volunteers.
(d)  In accordance with state law, the department may provide compensation for actual and necessary travel and living expenses incurred by a volunteer on a deployment using money available for that purpose.
(e)  The department may establish a fee schedule for participating entities receiving incident response team assistance.  The amount of fees collected may not exceed the department's costs to operate the incident response team.
Added by Acts 2021, 87th Leg., R.S., Ch. 567 (S.B. 475), Sec. 6, eff. June 14, 2021.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter N. -2. Texas Volunteer Incident Response Team › Section 2054.52008. Status of Volunteer; Liability

Sec. 2054.52008.  STATUS OF VOLUNTEER; LIABILITY.  (a)  A volunteer is not an agent, employee, or independent contractor of this state for any purpose and has no authority to obligate this state to a third party.
(b)  This state is not liable to a volunteer for personal injury or property damage sustained by the volunteer that arises from participation in the incident response team.
Added by Acts 2021, 87th Leg., R.S., Ch. 567 (S.B. 475), Sec. 6, eff. June 14, 2021.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter N. -2. Texas Volunteer Incident Response Team › Section 2054.52009. Civil Liability

Sec. 2054.52009.  CIVIL LIABILITY.  A volunteer who in good faith provides professional services in response to a cybersecurity event is not liable for civil damages as a result of the volunteer's acts or omissions in providing the services, except for wilful and wanton misconduct.  This immunity is limited to services provided during the time of deployment for a cybersecurity event.
Added by Acts 2021, 87th Leg., R.S., Ch. 567 (S.B. 475), Sec. 6, eff. June 14, 2021.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter N. -2. Texas Volunteer Incident Response Team › Section 2054.52010. Confidential Information

Sec. 2054.52010.  CONFIDENTIAL INFORMATION.  Information written, produced, collected, assembled, or maintained by the department, a participating entity, the cybersecurity council, or a volunteer in the implementation of this subchapter is confidential and not subject to disclosure under Chapter 552 if the information:
(1)  contains the contact information for a volunteer;
(2)  identifies or provides a means of identifying a person who may, as a result of disclosure of the information, become a victim of a cybersecurity event;
(3)  consists of a participating entity's cybersecurity plans or cybersecurity-related practices; or
(4)  is obtained from a participating entity or from a participating entity's computer system in the course of providing assistance under this subchapter.
Added by Acts 2021, 87th Leg., R.S., Ch. 567 (S.B. 475), Sec. 6, eff. June 14, 2021.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter O. Major Outsourced Contracts › Section 2054.521. Major Outsourced Contract Defined; Rule

Sec. 2054.521.  MAJOR OUTSOURCED CONTRACT DEFINED; RULE.  The board by rule shall define what constitutes a major outsourced contract with regard to contracts the department executes with entities other than this state or a political subdivision of this state. The definition must include as a major outsourced contract:
(1)  outsourced contracts entered into under Subchapter I and Subchapter L of this chapter or Chapter 2170; and
(2)  contracts that exceed a monetary threshold, other than those described by Subdivision (1).
Added by Acts 2013, 83rd Leg., R.S., Ch. 48 (H.B. 2472), Sec. 13, eff. September 1, 2013.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter O. Major Outsourced Contracts › Section 2054.522. Board Approval and Oversight of Major Outsourced Contracts

Sec. 2054.522.  BOARD APPROVAL AND OVERSIGHT OF MAJOR OUTSOURCED CONTRACTS.  (a)  The department must receive approval from the board before:
(1)  entering into a major outsourced contract; or
(2)  amending any major outsourced contract, if the amendment has significant statewide impact.
(b)  The board shall establish one or more subcommittees to monitor the department's major outsourced contracts.
Added by Acts 2013, 83rd Leg., R.S., Ch. 48 (H.B. 2472), Sec. 13, eff. September 1, 2013.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter O. Major Outsourced Contracts › Section 2054.523. Management Plans for Major Outsourced Contracts

Sec. 2054.523.  MANAGEMENT PLANS FOR MAJOR OUTSOURCED CONTRACTS.  (a)  The department shall specify procedures for administering, monitoring, and overseeing each major outsourced contract by creating a management plan for each contract.  In each management plan, the department shall specify the department's approach to managing and mitigating the risks inherent in each contract.
(b)  Department staff who perform contract administration and program duties shall jointly develop the management plans with input from executive management and the board. Each management plan must be approved by the executive director.
(c)  Each management plan must establish clear lines of accountability and coordination of contract activities. The plan must provide details about implementing the program that is the subject of the contract as well as procedures for monitoring contractor performance, identifying and mitigating risks related to the contract, and involving and communicating with customers who will be served by any programs implemented through the contract.  As appropriate, the plan must define an approach for transitioning from one major outsourced contract to another major outsourced contract.
(d)  The department shall revise each management plan:
(1)  as necessary to keep current during the contracting process; and
(2)  when the department renews, amends, or resolicits a major outsourced contract to ensure the plan remains updated and incorporates any changes resulting from a new contract.
Added by Acts 2013, 83rd Leg., R.S., Ch. 48 (H.B. 2472), Sec. 13, eff. September 1, 2013.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter O. Major Outsourced Contracts › Section 2054.524. Customer Involvement in Major Outsourced Contracts

Sec. 2054.524.  CUSTOMER INVOLVEMENT IN MAJOR OUTSOURCED CONTRACTS.  The department shall establish formal procedures to ensure customer involvement in decision making regarding each of the department's major outsourced contracts, including initial analysis, solicitation development, and contract award and implementation, that affect those customers.
Added by Acts 2013, 83rd Leg., R.S., Ch. 48 (H.B. 2472), Sec. 13, eff. September 1, 2013.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter P. Additional Provisions on Contracting › Section 2054.551. Definition

Sec. 2054.551.  DEFINITION.  In this subchapter, "contract management guide" means the guide developed under this subchapter.
Added by Acts 2013, 83rd Leg., R.S., Ch. 48 (H.B. 2472), Sec. 13, eff. September 1, 2013.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter P. Additional Provisions on Contracting › Section 2054.552. Conflict of Interest in Contracting

Sec. 2054.552.  CONFLICT OF INTEREST IN CONTRACTING.  (a)  A department employee may not:
(1)  have an interest in, or in any manner be connected with, a contract or bid for a purchase of goods or services by the department; or
(2)  in any manner, including by rebate or gift, directly or indirectly accept or receive from a person to whom a contract may be awarded anything of value or a promise, obligation, or contract for future reward or compensation.
(b)  A department employee who violates Subsection (a)(2) is subject to dismissal.
(c)  The board shall adopt rules to implement this section.
(d)  The department shall train staff in the requirements of this section and Section 572.054 and incorporate the requirements into the contract management guide and the department's internal policies, including employee manuals.
Added by Acts 2013, 83rd Leg., R.S., Ch. 48 (H.B. 2472), Sec. 13, eff. September 1, 2013.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter P. Additional Provisions on Contracting › Section 2054.553. Contract Management Training Policy

Sec. 2054.553.  CONTRACT MANAGEMENT TRAINING POLICY.  (a)  The department shall develop a policy for training department staff in contract management.
(b)  The policy must establish contract management training requirements for all staff involved in contract management, including contract managers, program staff, and executive management.
(c)  The policy must specify the department's overall approach to procuring and managing contracts, as well as contract-specific procedures developed in the contract management guide and under Subchapter O.
Added by Acts 2013, 83rd Leg., R.S., Ch. 48 (H.B. 2472), Sec. 13, eff. September 1, 2013.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter P. Additional Provisions on Contracting › Section 2054.554. Contract Management Guide; Rules

Sec. 2054.554.  CONTRACT MANAGEMENT GUIDE; RULES.  (a)  The department shall develop and periodically update a contract management guide to provide an overall, consistent approach on procurement and management of major outsourced contracts under Subchapter O and other contracts.  In updating the guide, the department shall make changes based on contract experiences and account for changing conditions to guide the updates.
(b)  The department shall coordinate with the department's internal auditor, subject to Section 2054.038(d), as needed for assistance and guidance in developing procedures in the contract management guide for monitoring contracts and individual contractors.
(c)  The board may adopt rules necessary to develop or update the contract management guide.
(d)  The contract management guide must provide information regarding the department's:
(1)  general approach to business case analysis, procurement planning, contract solicitation, contract execution, and contract monitoring and oversight;
(2)  ethics standards and policies, including those required by Section 2054.552; and
(3)  approach to changing a program's internal structure or model for delivering services to customers.
(e)  The contract management guide must:
(1)  establish clear lines of accountability, staff roles and responsibilities, and decision-making authority for program staff, contract management staff, executive management, customers, and the board;
(2)  include the procedures established under Section 2054.524 regarding customer involvement; and
(3)  establish the department's process for evaluating and managing risk during each stage of contract procurement, implementation, and management.
(f)  The contract management guide must describe the expectations and standards for obtaining and using customer input during all contract management phases.
Added by Acts 2013, 83rd Leg., R.S., Ch. 48 (H.B. 2472), Sec. 13, eff. September 1, 2013.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter Q. Legacy System Modernization Strategy › Section 2054.571. Definition

Sec. 2054.571.  DEFINITION.  In this subchapter, "legacy system" means a computer system or application program that is operated with obsolete or inefficient hardware or software technology.
Added by Acts 2015, 84th Leg., R.S., Ch. 460 (H.B. 1890), Sec. 1, eff. June 15, 2015.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter Q. Legacy System Modernization Strategy › Section 2054.572. Legacy System Modernization Strategy

Sec. 2054.572.  LEGACY SYSTEM MODERNIZATION STRATEGY.  (a) The department shall, in collaboration with state agencies other than institutions of higher education, develop a legacy system modernization strategy to guide the state in legacy system modernization efforts.
(b)  The strategy must:
(1)  plan for legacy system modernization statewide and at the agency level;
(2)  establish a statewide application development framework;
(3)  facilitate standardization and collaboration among state agencies; and
(4)  promote the use of common technology solutions and collective purchasing by the state.
Added by Acts 2015, 84th Leg., R.S., Ch. 460 (H.B. 1890), Sec. 1, eff. June 15, 2015.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter Q. Legacy System Modernization Strategy › Section 2054.573. Reporting Service

Sec. 2054.573.  REPORTING SERVICE.  The department shall implement a shared data reporting and business analytics service, with appropriate security isolation, for state agencies other than institutions of higher education.  The department may launch the service as a pilot program with a limited number of state agencies in order to validate a solution before implementing a statewide service.
Added by Acts 2015, 84th Leg., R.S., Ch. 460 (H.B. 1890), Sec. 1, eff. June 15, 2015.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter Q. Legacy System Modernization Strategy › Section 2054.574. Application Portfolio Management Program

Sec. 2054.574.  APPLICATION PORTFOLIO MANAGEMENT PROGRAM.  (a)  The department shall develop and implement a shared application portfolio management program for state agencies that includes best practices and tools to assist state agencies in managing applications.  The department may launch the program as a pilot program with a limited number of state agencies in order to validate solutions before offering the program on a statewide basis.
(b)  The department may contract for and offer the program to other entities under Section 2054.0565.
Added by Acts 2015, 84th Leg., R.S., Ch. 460 (H.B. 1890), Sec. 1, eff. June 15, 2015.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter Q. Legacy System Modernization Strategy › Section 2054.575. Security Issues Related to Legacy Systems

Sec. 2054.575.  SECURITY ISSUES RELATED TO LEGACY SYSTEMS.  (a)  A state agency shall, with available funds, identify information security issues and develop a plan to prioritize the remediation and mitigation of those issues.  The agency shall include in the plan:
(1)  procedures for reducing the agency's level of exposure with regard to information that alone or in conjunction with other information identifies an individual maintained on a legacy system of the agency;
(2)  the best value approach for modernizing, replacing, renewing, or disposing of a legacy system that maintains information critical to the agency's responsibilities;
(3)  analysis of the percentage of state agency personnel in information technology, cybersecurity, or other cyber-related positions who currently hold the appropriate industry-recognized certifications as identified by the National Initiative for Cybersecurity Education;
(4)  the level of preparedness of state agency cyber personnel and potential personnel who do not hold the appropriate industry-recognized certifications to successfully complete the industry-recognized certification examinations; and
(5)  a strategy for mitigating any workforce-related discrepancy in information technology, cybersecurity, or other cyber-related positions with the appropriate training and industry-recognized certifications.
(b)  The department shall, on request, facilitate collaborative efforts among state agencies to develop a plan described by Subsection (a).
(c)  A plan developed under this section, along with any information or communication prepared or maintained for use in the preparation of the plan, is confidential and is not subject to disclosure under Chapter 552.
Added by Acts 2015, 84th Leg., R.S., Ch. 460 (H.B. 1890), Sec. 1, eff. June 15, 2015.
Amended by:
Acts 2017, 85th Leg., R.S., Ch. 683 (H.B. 8), Sec. 12, eff. September 1, 2017.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter Q. Legacy System Modernization Strategy › Section 2054.576. Shared Solutions

Sec. 2054.576.  SHARED SOLUTIONS.  (a) In considering and implementing new applications or remediation strategies, state agencies shall prioritize standardization and consolidation by emphasizing shared solutions, including those delivered as a service through the Internet.
(b)  The department may contract for and offer shared solutions, including those delivered as a service through the Internet, to other entities under Section 2054.0565.
Added by Acts 2015, 84th Leg., R.S., Ch. 460 (H.B. 1890), Sec. 1, eff. June 15, 2015.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter Q. Legacy System Modernization Strategy › Section 2054.577. Technology Improvement and Modernization Fund

Sec. 2054.577.  TECHNOLOGY IMPROVEMENT AND MODERNIZATION FUND.  (a)  The technology improvement and modernization fund is a special fund in the state treasury outside the general revenue fund.
(b)  The fund consists of:
(1)  money transferred or deposited to the credit of the fund at the direction of the legislature;
(2)  money received from the federal government for the purposes of improving and modernizing state agency information resources;
(3)  gifts, donations, and grants to the fund, including federal grants; and
(4)  interest earned on the investment of money in the fund.
(c)  Money in the fund:
(1)  may be used to improve and modernize state agency information resources, including legacy system projects and cybersecurity projects; and
(2)  may not be used to replace money appropriated to a state agency for the purposes of operating and maintaining state agency information resources or reduce the amount of money appropriated to a state agency for those purposes.
(d)  Section 404.071 does not apply to the fund.
(e)  In this section, "state agency" has the meaning assigned by Section 2052.101.
Added by Acts 2021, 87th Leg., R.S., Ch. 1037 (H.B. 4018), Sec. 1, eff. June 18, 2021.
For expiration of this section, see Subsection (j).
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter Q. Legacy System Modernization Strategy › Section 2054.578. Joint Oversight Committee on Investment in Information Technology Improvement and Modernization Projects

Sec. 2054.578.  JOINT OVERSIGHT COMMITTEE ON INVESTMENT IN INFORMATION TECHNOLOGY IMPROVEMENT AND MODERNIZATION PROJECTS.  (a)  In this section:
(1)  "Committee" means the Joint Oversight Committee on Investment in Information Technology Improvement and Modernization Projects.
(2)  "State agency" has the meaning assigned by Section 2052.101.
(b)  The committee is created to review investment and funding strategies for projects to improve or modernize state agency information resources technologies.
(c)  The committee is composed of six members as follows:
(1)  three members of the senate appointed by the lieutenant governor; and
(2)  three members of the house of representatives appointed by the speaker of the house of representatives.
(d)  The presiding officer of the committee shall alternate annually between:
(1)  a member of the senate appointed by the lieutenant governor; and
(2)  a member of the house of representatives appointed by the speaker of the house of representatives.
(e)  A vacancy on the committee shall be filled in the same manner as the original appointment.
(f)  The committee biennially shall provide a written report to the legislature that:
(1)  identifies:
(A)  existing and planned projects to improve or modernize state agency information resources technologies; and
(B)  the method of funding for each project identified by the committee under Paragraph (A); and
(2)  includes:
(A)  a determination by the committee of the amount necessary to fully fund each project identified under Subdivision (1) to completion; and
(B)  strategies developed by the committee to ensure a long-term investment solution for projects to improve or modernize state agency information resources technologies is in place, including strategies to:
(i)  access the full amount of federal money available for those projects; and
(ii)  use information gathered by the department during previous projects to improve the management, oversight, and transparency of future projects.
(g)  The department shall provide staff support for the committee.
(h)  The committee:
(1)  has the powers of a joint committee; and
(2)  may obtain funding in the same manner as a joint committee.
(i)  The rules adopted by the 87th Legislature for the administration of joint committees apply to the committee to the extent the rules are consistent with this section.
(j)  The committee is abolished and this section expires September 1, 2026.
Added by Acts 2021, 87th Leg., R.S., Ch. 1037 (H.B. 4018), Sec. 1, eff. June 18, 2021.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter R. Information Resources of Governmental Entities › Section 2054.601. Use of Next Generation Technology

Sec. 2054.601.  USE OF NEXT GENERATION TECHNOLOGY.  Each state agency and local government shall, in the administration of the agency or local government, consider using next generation technologies, including cryptocurrency, blockchain technology, robotic process automation, and artificial intelligence.
Added by Acts 2019, 86th Leg., R.S., Ch. 509 (S.B. 64), Sec. 18, eff. September 1, 2019.
Amended by:
Acts 2021, 87th Leg., R.S., Ch. 567 (S.B. 475), Sec. 8, eff. June 14, 2021.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter R. Information Resources of Governmental Entities › Section 2054.602. Liability Exemption

Sec. 2054.602.  LIABILITY EXEMPTION.  A person who in good faith discloses to a state agency or other governmental entity information regarding a potential security issue with respect to the agency's or entity's information resources technologies is not liable for any civil damages resulting from disclosing the information unless the person stole, retained, or sold any data obtained as a result of the security issue.
Added by Acts 2019, 86th Leg., R.S., Ch. 509 (S.B. 64), Sec. 18, eff. September 1, 2019.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter R. Information Resources of Governmental Entities › Section 2054.603. Security Incident Notification by State Agency or Local Government

Sec. 2054.603.  SECURITY INCIDENT NOTIFICATION BY STATE AGENCY OR LOCAL GOVERNMENT.  (a)  In this section:
(1)  "Security incident" means:
(A)  a breach or suspected breach of system security as defined by Section 521.053, Business & Commerce Code; and
(B)  the introduction of ransomware, as defined by Section 33.023, Penal Code, into a computer, computer network, or computer system.
(2)  "Sensitive personal information" has the meaning assigned by Section 521.002, Business & Commerce Code.
(b)  A state agency or local government that owns, licenses, or maintains computerized data that includes sensitive personal information, confidential information, or information the disclosure of which is regulated by law shall, in the event of a security incident:
(1)  comply with the notification requirements of Section 521.053, Business & Commerce Code, to the same extent as a person who conducts business in this state;
(2)  not later than 48 hours after the discovery of the security incident, notify:
(A)  the department, including the chief information security officer; or
(B)  if the security incident involves election data, the secretary of state; and
(3)  comply with all department rules relating to reporting security incidents as required by this section.
(c)  Not later than the 10th business day after the date of the eradication, closure, and recovery from a security incident, a state agency or local government shall notify the department, including the chief information security officer, of the details of the security incident and include in the notification an analysis of the cause of the security incident.
(d)  This section does not apply to a security incident that a local government is required to report to an independent organization certified by the Public Utility Commission of Texas under Section 39.151, Utilities Code.
Added by Acts 2009, 81st Leg., R.S., Ch. 419 (H.B. 2004), Sec. 4, eff. September 1, 2009.
Amended by:
Acts 2017, 85th Leg., R.S., Ch. 683 (H.B. 8), Sec. 8, eff. September 1, 2017.
Acts 2019, 86th Leg., R.S., Ch. 509 (S.B. 64), Sec. 14, eff. September 1, 2019.
Transferred, redesignated and amended from Government Code, Section 2054.1125 by Acts 2023, 88th Leg., R.S., Ch. 67 (S.B. 271), Sec. 1, eff. September 1, 2023.
For expiration of this subchapter, see Section 2054.624.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter S. Artificial Intelligence Advisory Council › Section 2054.621. Definitions

Sec. 2054.621.  DEFINITIONS.  In this subchapter:
(1)  "Algorithm" means a computerized procedure consisting of a set of steps used to accomplish a determined task.
(2)  "Artificial intelligence systems" means systems capable of:
(A)  perceiving an environment through data acquisition and processing and interpreting the derived information to take an action or actions or to imitate intelligent behavior given a specific goal; and
(B)  learning and adapting behavior by analyzing how the environment is affected by prior actions.
(3)  "Automated decision system" means an algorithm, including an algorithm incorporating machine learning or other artificial intelligence techniques, that uses data-based analytics to make or support governmental decisions, judgments, or conclusions.
(4)  "Automated final decision system" means an automated decision system that makes final decisions, judgments, or conclusions without human intervention.
(5)  "Automated support decision system" means an automated decision system that provides information to inform the final decision, judgment, or conclusion of a human decision maker.
(6)  "Council" means the artificial intelligence advisory council established under this subchapter.
(7)  "Public or private institution of higher education" means:
(A)  an institution of higher education, as defined by Section 61.003, Education Code; or
(B)  a private or independent institution of higher education, as defined by Section 61.003, Education Code.
Added by Acts 2023, 88th Leg., R.S., Ch. 828 (H.B. 2060), Sec. 1, eff. June 13, 2023.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter S. Artificial Intelligence Advisory Council › Section 2054.623. Automated Decision Systems Inventory Report

Sec. 2054.623.  AUTOMATED DECISION SYSTEMS INVENTORY REPORT.  (a)  Not later than July 1, 2024, each agency in the executive and legislative branches of state government, using money appropriated to the agency by this state, shall submit an inventory report of all automated decision systems that are being developed, employed, or procured by the agency.  For each automated decision system, the inventory report must include a description of:
(1)  the name and vendor of the automated decision system, if any;
(2)  the automated decision system's general capabilities,  including:
(A)  reasonably foreseeable capabilities outside the scope of the agency's proposed use; and
(B)  whether the automated decision system is used or may be used for independent decision-making powers and the impact of those decisions on the residents of this state;
(3)  the types of data inputs that the technology uses;
(4)  how the data described by Subdivision (3) is generated, collected, and processed;
(5)  the types of data the automated decision system is reasonably likely to generate;
(6)  whether the automated decision system has been tested by an independent third party, has a known bias, or is untested for bias;
(7)  the purpose and proposed use of the automated decision system, including:
(A)  the decisions the automated decision system will be used to make or support;
(B)  whether the automated decision system is an automated final decision system or an automated support decision system; and
(C)  the automated decision system's intended benefits, including any data or research relevant to the outcome of those results;
(8)  how automated decision system data is securely stored and processed and whether the agency intends to share access to the automated decision system or data from that automated decision system with any other entity, and why; and
(9)  the information technology fiscal impacts of the automated decision system, including:
(A)  initial acquisition costs and ongoing operating costs, such as maintenance, licensing, personnel, legal compliance, use auditing, data retention, and security costs;
(B)  any cost savings that would be achieved through the use of the technology; and
(C)  any current or potential sources of funding, including any subsidies or free products being offered by vendors or governmental entities.
(b)  Not later than March 1, 2024, the council, in consultation with the department, shall prescribe the form, contents, and manner of submission of the automated decision systems inventory report required under this section.
(c)  Each agency shall submit the report required under this section to the:
(1)  department;
(2)  council; and
(3)  standing committees of the senate and house of representatives with primary jurisdiction over state agency information technology.
Added by Acts 2023, 88th Leg., R.S., Ch. 828 (H.B. 2060), Sec. 1, eff. June 13, 2023.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2054 - Information Resources › Subchapter S. Artificial Intelligence Advisory Council › Section 2054.624. Council Abolished; Expiration of Subchapter

Sec. 2054.624.  COUNCIL ABOLISHED; EXPIRATION OF SUBCHAPTER.  The council is abolished and this subchapter expires January 1, 2025.
Added by Acts 2023, 88th Leg., R.S., Ch. 828 (H.B. 2060), Sec. 1, eff. June 13, 2023.
2023 Texas Statutes › Government Code › Title 10 - General Government › Subtitle B - Information and Planning › Chapter 2055 - Electronic Grant System › Subchapter A. General Provisions › Section 2055.001. Definitions

Sec. 2055.001.  DEFINITIONS.  In this chapter:
(1)  "Board," "department," "electronic government project," "executive director," "local government," "major information resources project," "quality assurance team," and "state electronic Internet portal" have the meanings assigned by Section 2054.003.
(2)  "Institution of higher education" has the meaning assigned by Section 61.003, Education Code.
(3)  Repealed by Acts 2007, 80th Leg., R.S., Ch. 1208, Sec. 16(4), eff. September 1, 2007.
Text of subdivision effective until April 01, 2025
(4)  "State agency" has the meaning assigned by Section 2054.003, except that the term does not include a university system or institution of higher education or an agency identified in Section 531.001(4).
Text of subdivision effective on April 01, 2025
(4)  "State agency" has the meaning assigned by Section 2054.003, except that the term does not include a university system or institution of higher education or an agency identified in Section 521.0001(5).
(5)  Repealed by Acts 2007, 80th Leg., R.S., Ch. 1208, Sec. 16(4), eff. September 1, 2007.
Added by Acts 2001, 77th Leg., ch. 1272, Sec. 1.01, eff. June 15, 2001.  Amended by Acts 2003, 78th Leg., ch. 198, Sec. 2.40, eff. Sept. 1, 2003;  Acts 2003, 78th Leg., ch. 1246, Sec. 15, eff. Sept. 1, 2003.
Amended by:
Acts 2005, 79th Leg., Ch. 862 (S.B. 1002), Sec. 1, eff. September 1, 2005.
Acts 2007, 80th Leg., R.S., Ch. 1208 (H.B. 1789), Sec. 16(4), eff. September 1, 2007.
Acts 2011, 82nd Leg., R.S., Ch. 973 (H.B. 1504), Sec. 25, eff. June 17, 2011.
Acts 2023, 88th Leg., R.S., Ch. 769 (H.B. 4611), Sec. 2.18, eff. April 1, 2025.