SB 1598 Summary

• Establishes the statewide information security and privacy office within the Arizona Department of Homeland Security to develop and enforce statewide information security policies, conduct compliance reviews, and manage risk mitigation across state agencies.

• Creates the position of statewide chief information security officer appointed by the director of the Arizona Department of Homeland Security to manage the new office and report to the director.

• Authorizes the statewide information security and privacy office to temporarily suspend operation of information technology infrastructure to isolate or stop the spread of security breaches or similar incidents, with budget units required to comply.

• Transfers responsibility for managing information security aspects of enterprise-level IT infrastructure from the Department of Administration to the Arizona Department of Homeland Security, while the Department of Administration retains overall infrastructure management.

• Adds the statewide chief information security officer as a voting member of the information technology authorization committee and updates the committee's consultation requirements to include the new office for IT project security reviews.