Adam RollinsA bill designed to enhance Texas’ ability to combat cybersecurity threats is currently advancing through the Texas House. The bill is pending in the newly created Delivery of Government Efficiency Committee. House Bill 150 was introduced to the Legislature as an emergency item to create the Texas Cyber Command (TCC). The bill would establish the TCC as a component of The University of Texas (UT) System, attached to UT San Antonio (UTSA).
As the institution’s overseer, UTSA would provide administrative support services. The command would have access to the university’s expertise and resources, as well as its surrounding local, state and federal partners. The first year of the agency’s creation and operations would cost approximately $88 million, according to the Legislative Budget Board.
The TCC’s intended purpose would be to greatly expand the state’s cybersecurity posture, responsible for preventing and responding to incidents that affect governmental entities and critical infrastructure. To achieve those goals, the agency would develop tools to:
- Improve cyber defense.
- Facilitate education and training of the cyber workforce.
- Establish cybersecurity standards.
- Create partnerships to carry out its functions.
As part of the institution’s establishment, the Legislature would transfer resources and workers from the Department of Information Resources (DIR), including 40 employees and cybersecurity spending. In addition, the institution would be equipped with certain powers and duties of the DIR.
The agency’s included powers and duties would include:
- Promoting public awareness.
- Developing cybersecurity best practices.
- Developing and providing training for state agencies.
- Administering cybersecurity threat intelligence.
- Supporting state agencies and entities experiencing cyber incidents.
- Providing risk and incident management.
- Operating a 24/7 cybersecurity hotline.
Among the primary objectives, the institution would establish a cybersecurity threat and intelligence center. The center would provide information sharing and analysis and utilize the regional security operation centers. In addition, the command would create an incident response unit to collaborate with the cybersecurity intelligence center to detect and remediate cybersecurity incidents.
The TCC would also create a Digital Forensics Laboratory to coordinate with the response unit to develop procedures to preserve evidence of cyber incidents. Evidence includes logs, communication and document chains of custody. The unit would also notify and remain in contact with the appropriate law enforcement agencies during cybersecurity incidents.
The command could procure via emergency powers during an emergency response to a cybersecurity incident.
Photo courtesy of Tima Miroshnichenko on Pexels
