Bill > S1536

Introduced Session

An act relating to cybersecurity; amending s. 110.205, F.S.; exempting certain personnel from the career service system; providing for the establishment of salary and benefits for certain positions; amending s. 282.0041, F.S.; providing definitions; amending s. 282.0051, F.S.; revising the purposes for which the Florida Digital Service is established; requiring the Florida Digital Service to ensure that independent project oversight on certain state agency information technology projects is performed in a certain manner; revising the date by which the Department of Management Services, acting through the Florida Digital Service, must provide certain recommendations to the Executive Office of the Governor and the Legislature; deleting certain duties of the Florida Digital Service; revising the total project cost of certain projects for which the Florida Digital Service must provide project oversight; specifying the date by which the Florida Digital Service must provide certain reports; requiring the state chief information officer, in consultation with the Secretary of Management Services, to designate a state chief technology officer; providing duties of the state chief technology officer; revising the total project cost of certain projects for which certain procurement actions must be taken; deleting provisions prohibiting the department, acting through the Florida Digital Service, from retrieving or disclosing certain data in certain circumstances; amending s. 282.00515, F.S.; conforming a cross-reference; amending s. 282.318, F.S.; providing that the Florida Digital Service is the lead entity for a certain purpose; requiring the Cybersecurity Operations Center to provide certain notifications; requiring the state chief information officer to make certain reports in consultation with the state chief information security officer; requiring a state agency to report ransomware and cybersecurity incidents within certain time periods; requiring the Cybersecurity Operations Center to notify certain entities immediately of reported incidents and take certain actions; requiring the state chief information security officer to notify the Legislature of certain incidents within a certain time period; requiring certain notification to be provided in a secure environment; requiring the Cybersecurity Operations Center to provide a certain report to certain entities by a specified date; requiring the Florida Digital Service to provide cybersecurity briefings to certain legislative committees; authorizing the Florida Digital Service to obtain certain access to certain infrastructure and direct certain measures; requiring a state agency head to designate a chief information security officer annually by a specified date; providing that certain agencies shall be under the general supervision of the agency head or designee for administrative purposes but reports to the state chief information officer; authorizing an agency to request that the department procure a chief information security officer; revising the purpose of an agency’s information security manager and the date by which he or she must be designated; authorizing the department to brief certain legislative committees in a closed setting on certain records that are confidential and exempt from public records requirements; requiring such legislative committees to maintain the confidential and exempt status of certain records; authorizing certain legislators to attend meetings of the Florida Cybersecurity Advisory Council; amending s. 282.3185, F.S.; requiring a local government to report ransomware and certain cybersecurity incidents to the Cybersecurity Operations Center within certain time periods; requiring the Cybersecurity Operations Center to notify certain entities immediately of certain incidents and take certain actions; requiring that certain notification be provided in a secure environment; amending s. 282.319, F.S.; revising the membership of the Florida Cybersecurity Advisory Council; creating s. 282.3191, F.S.; requiring the Florida Center for Cybersecurity at the University of South Florida to annually conduct certain comprehensive risk assessments; requiring that the center use the data collected and analyzed to provide certain recommendations; requiring the center to submit such assessments and recommendations to the Governor, the Legislature, and the executive director of the Florida Cybersecurity Advisory Council; providing an effective date.

AI Summary

Jay Collins (R)*, 

Died in Governmental Oversight and Accountability (on 06/16/2025)

Official Document