AK HB3

Amends AS 26.23.900(2) to expand the definition of "disaster" to include cyber attacks and serious cyber incidents affecting critical infrastructure or state information systems.

Defines "critical infrastructure" as physical or virtual systems vital to the state whose incapacity or destruction would have debilitating effects on security, economic security, public health, or safety.

Defines "serious cyber incident" as an incident with confirmed effects on confidentiality, integrity, or availability of systems and data, with legal or privacy implications, affecting multiple agencies, or requiring specialized security resources.

Requires the Commissioner of Administration or designee to certify to the governor that a cyber attack or serious cyber incident has a high probability of occurring in the near future, based on specific information that state or political subdivision systems or infrastructure may be affected.

Maintains existing disaster definition categories for natural incidents, environmental hazards, equipment failure, enemy/terrorist attacks, and disease outbreaks.