Requires State, county, and municipal employees and certain State contractors to complete cybersecurity awareness training.
Impact
The implications of A1928 extend to various levels of state and local governance. By requiring cybersecurity training across different tiers of public service, the bill addresses the increasing threats posed by data breaches and cyberattacks. It seeks to create a culture of cybersecurity awareness among all public employees, which may, in turn, reduce vulnerabilities within state-operated systems and data repositories. With compliance being enforceable through periodic audits, the bill aims to ensure that all employees are effectively trained and knowledgeable about current cyber threats and applicable safety practices.
Summary
Assembly Bill A1928 aims to enhance the cybersecurity readiness of the state workforce by mandating cybersecurity awareness training for all State, county, and municipal employees, as well as certain State contractors. The bill requires that these individuals complete an approved training program at least once each calendar year. This training is designed to educate participants on risks and best practices related to cybersecurity, incorporating specific content tailored for different groups based on their roles and responsibilities within state operations. The Chief Technology Officer of the Office of Information Technology is tasked with approving the training program's format and content, which will be delivered online.
Contention
While the overall intent of A1928 is to bolster the state's defense against cyber incidents, there may be points of contention related to the implementation and administrative burdens it places on local governments and contractors. Concerns may arise regarding the adequacy of resources required to facilitate the training and the potential disruption it could cause in regular workflows. Additionally, there could be arguments about the financial implications for smaller municipalities and contractors, which may struggle with compliance given budget constraints. Thus, stakeholders may debate how the state ensures equitable access to training resources and support for all entities affected by this legislation.