WeVote

Bill

Bill

H 168

CYBERSECURITY AND RESILIENCY FUND – Adds to existing law to establish a cybersecurity and resiliency fund to address the state’s need for information technology and cybersecurity infrastructure.

68th Legislature, 1st Regular Session (2025)

Idaho's House Bill 168 creates a $10M Cybersecurity and Resiliency Fund to enhance IT infrastructure, ensuring state agencies can better protect data and resources.

Reported Printed and Referred to Appropriations
0
WeVote Research Nonpartisan
Bill Summary · H 168

Summary of House Bill 168: Cybersecurity and Resiliency Fund

Purpose and Intent

House Bill 168 aims to establish a Cybersecurity and Resiliency Fund in the state of Idaho. The primary goal of this fund is to address the state's ongoing needs for enhancing and maintaining its information technology (IT) and cybersecurity infrastructure. This initiative is in response to the increasing importance of robust cybersecurity measures in safeguarding state resources and data.

Key Provisions

The bill includes several significant provisions:

  1. Creation of the Fund:

    • A new fund, known as the Cybersecurity and Resiliency Fund, will be established within the state treasury.
    • The fund will consist of moneys appropriated or transferred by the legislature.
  2. Ongoing Appropriation:

    • All funds received will be continually appropriated for the purposes outlined in the bill, ensuring that resources are available for cybersecurity and IT needs.
  3. Investment of Funds:

    • The state treasurer is responsible for investing idle moneys in the fund, with interest earnings retained for future use.
  4. Five-Year Plan:

    • The Office of Information Technology Services (OITS) is tasked with developing a five-year plan for updating and replacing IT and cybersecurity infrastructure.
    • This plan will be reviewed and updated annually as part of the state’s budget process.
  5. Definitions:

    • The bill defines "cybersecurity technology" and "information technology infrastructure" to clarify what types of technologies and systems will be supported by the fund.

Definitions

  • Cybersecurity Technology: Includes measures and tools used to protect networks, devices, and data from unauthorized access or criminal use. Examples include:

    • Network and data center security
    • Endpoint security
    • Cloud security
    • Data protection and recovery
    • Incident response
    • Security awareness training
  • Information Technology Infrastructure: Refers to the physical and virtual resources that support the flow, storage, processing, and analysis of data, including:

    • Network infrastructure
    • Computers and storage devices (desktops and laptops)

Fiscal Impact

The bill outlines a $10,000,000 ongoing transfer from the General Fund to the Cybersecurity and Resiliency Fund. This financial commitment underscores the state's dedication to improving its cybersecurity posture.

Affected Parties

The legislation will primarily impact:
- State agencies that rely on IT and cybersecurity infrastructure.
- The Office of Information Technology Services, which will oversee the implementation and management of the fund and associated plans.

Procedural Aspects

  • Introduced: February 7, 2025
  • Status: Reported printed and referred to the Appropriations Committee on February 10, 2025.
  • Effective Date: The bill includes an emergency clause, making it effective on July 1, 2025.

Conclusion

House Bill 168 represents a proactive approach by the state of Idaho to bolster its cybersecurity and IT infrastructure through dedicated funding and strategic planning. By establishing the Cybersecurity and Resiliency Fund, the state aims to ensure that it can effectively respond to the evolving challenges in the digital landscape.

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.