Bill > AB749

This bill requires every state agency, with some exceptions, to implement Zero Trust architecture for all data, hardware, software, internal systems, and essential third-party software in on-premises, cloud, and hybrid environments. The bill sets deadlines for agencies to achieve "Initial," "Advanced," and "Optimal" maturity levels based on the Cybersecurity and Infrastructure Security Agency (CISA) Maturity Model. The bill also requires the Chief of the Office of Information Security to develop or revise uniform technology policies, standards, and procedures for state agencies to implement Zero Trust architecture and to update annual reporting requirements to track progress. The bill aims to improve the state's cybersecurity defenses and protect against cyber threats in a manner consistent with federal funding requirements.