AR HB1549

Creates the State Cybersecurity Office managed by the State Information Security Officer to direct and manage all cybersecurity and information security functions for executive branch state agencies

Requires the State Cybersecurity Office to establish governance policies, procedures, and standards covering data classification, breach notification, threat detection, cyber assessments, training, and incident response

Mandates that cybersecurity personnel across state agencies functionally report to the State Cybersecurity Office, while their positions, funding, and daily management remain with their respective agencies

Requires the State Cybersecurity Office to report audit and enforcement findings to the Joint Committee on Advanced Communications and Information Technology at least twice per calendar year in closed meetings

Allows state agencies to adopt more stringent cybersecurity standards than the statewide minimum, and requires compliance with stricter federal standards when applicable