Florida Senate - 2024 COMMITTEE AMENDMENT
Bill No. CS for SB 1662
Ì712374+Î712374
LEGISLATIVE ACTION
Senate . House
Comm: RCS .
02/20/2024 .
.
.
.
—————————————————————————————————————————————————————————————————
—————————————————————————————————————————————————————————————————
The Appropriations Committee on Agriculture, Environment, and
General Government (Collins) recommended the following:
1 Senate Amendment (with title amendment)
2
3 Delete everything after the enacting clause
4 and insert:
5 Section 1. Section 1004.444, Florida Statutes, is amended
6 to read:
7 1004.444 Florida Center for Cybersecurity.—
8 (1) The Florida Center for Cybersecurity, which may also be
9 referred to as “Cyber Florida,” is established within the
10 University of South Florida, under the direction of the
11 president of the university or the president’s designee. The
12 president may assign the center to a college of the university
13 if the college has a strong emphasis on cybersecurity,
14 technology, or computer sciences and engineering, as determined
15 and approved by the university’s board of trustees.
16 (2) The mission and goals of the center are to:
17 (a) Position Florida as the national leader in
18 cybersecurity and its related workforce primarily through
19 advancing and funding education and, research and development
20 initiatives in cybersecurity and related fields, with a
21 secondary emphasis on, and community engagement and
22 cybersecurity awareness.
23 (b) Assist in the creation of jobs in the state’s
24 cybersecurity industry and enhance the existing cybersecurity
25 workforce through education, research, applied science, and
26 engagements and partnerships with the private and military
27 sectors.
28 (c) Act as a cooperative facilitator for state business and
29 higher education communities to share cybersecurity knowledge,
30 resources, and training.
31 (d) Seek out research and development agreements and other
32 partnerships with major military installations and affiliated
33 contractors to assist, when possible, in homeland cybersecurity
34 defense initiatives.
35 (e) Attract cybersecurity companies and jobs to this the
36 state, with an emphasis on the defense, finance, health care,
37 transportation, and utility sectors.
38 (f) Conduct, fund, and facilitate research and applied
39 science that leads to the creation of new technologies and
40 software packages that have military and civilian applications
41 and that can be transferred for military and homeland defense
42 purposes or for sale or use in the private sector.
43 (3) Upon receiving a request for assistance from the
44 Department of Management Services, the Florida Digital Service,
45 or another state agency, the center is authorized, but may not
46 be compelled by the agency, to conduct, consult on, or otherwise
47 assist any state-funded initiatives related to:
48 (a) Cybersecurity training, professional development, and
49 education for state and local government employees, including
50 school districts and the judicial branch; and
51 (b) Increasing the cybersecurity effectiveness of the
52 state’s and local governments’ technology platforms and
53 infrastructure, including school districts and the judicial
54 branch.
55 Section 2. (1) In order to ensure the use of best practices
56 and seamless functionality within the enterprise, the Department
57 of Management Services shall contract with an independent
58 verification and validation (IV&V) provider to provide IV&V
59 services for all agency staff and vendor work needed to
60 implement the enterprise cybersecurity resiliency program.
61 (2) The IV&V provider shall complete an assessment of the
62 current program by December 1, 2024. The assessment must
63 include, but need not be limited to, recommendations based on
64 the evaluation of:
65 (a) The use of Cybersecurity Operations Center tools
66 relative to their inherent capabilities to enhance efficiency
67 and effectiveness;
68 (b) The existing processes to identify and address
69 inefficiencies and areas requiring improvement;
70 (c) The interoperability among different systems to ensure
71 compatibility and facilitate smooth data exchange;
72 (d) The alignment of strategic initiatives and resource
73 allocation with organizational objectives; and
74 (e) The effectiveness of established communication channels
75 to facilitate collaboration and dissemination of information
76 across state entities.
77 (3) The IV&V contract must require that monthly reports and
78 deliverables be simultaneously provided to the Department of
79 Management Services, the Executive Office of the Governor’s
80 Office of Policy and Budget, the chair of the Senate
81 Appropriations Committee, and the chair of the House of
82 Representatives Appropriations Committee.
83 Section 3. This act shall take effect July 1, 2024.
84
85 ================= T I T L E A M E N D M E N T ================
86 And the title is amended as follows:
87 Delete everything before the enacting clause
88 and insert:
89 A bill to be entitled
90 An act relating to cybersecurity; amending s.
91 1004.444, F.S.; providing that the Florida Center for
92 Cybersecurity may also be referred to as “Cyber
93 Florida”; providing that the center is established
94 under the direction of the president of the University
95 of South Florida, or his or her designee, and, subject
96 to the approval of the university’s board of trustees,
97 may be assigned by the president to a college that
98 meets certain requirements; revising the mission and
99 goals of the center; authorizing the center to take
100 certain actions relating to certain initiatives;
101 requiring the Department of Management Services to
102 contract with an independent verification and
103 validation provider for specified services for all
104 agency staff and vendor work to implement the
105 enterprise cybersecurity resiliency program; requiring
106 such provider to complete an assessment of the current
107 program by a specified date; requiring that the
108 assessment include recommendations based on certain
109 evaluations; requiring that the contract require that
110 monthly reports and deliverables be simultaneously
111 provided to specified entities and parties; providing
112 an effective date.