Bill > HB2271

This bill removes the expiration dates for several provisions related to cybersecurity in Kansas state government, ensuring continued implementation of comprehensive cybersecurity measures across different government branches. The bill requires each branch of government (including Insurance, Secretary of State, Treasurer, Attorney General, Judicial, and Legislative branches) to appoint a Chief Information Security Officer (CISO) who will be responsible for developing and implementing robust cybersecurity programs. These programs must comply with the National Institute of Standards and Technology Cybersecurity Framework (CSF) 2.0, with specific requirements to achieve CSF tier 3.0 by July 1, 2028, and tier 4.0 by July 1, 2030. Each CISO must ensure annual cybersecurity awareness training for all employees, coordinate annual cybersecurity audits with the U.S. Cybersecurity and Infrastructure Security Agency, and maintain confidentiality of audit results. The bill also requires integration of cybersecurity services under the chief information technology officer of each government branch and mandates that all government websites transition to ".gov" domains by February 1, 2025. Additionally, the legislation provides for potential budget reductions for agencies not complying with these cybersecurity requirements, creating a strong incentive for maintaining high security standards across state government.

Government Affairs

Legislative Modernization (House)

https://kslegislature.gov/li/b2025_26/measures/hb2271/