KS HB2574

Creates two new oversight bodies: the legislative branch information technology oversight council (membership determined by legislative coordinating council) and the judicial branch technology oversight council (membership determined by the chief justice) to set IT standards, establish policies, approve strategic plans, and evaluate cybersecurity programs for their respective branches

Replaces specific NIST Cybersecurity Framework 2.0 tier requirements (achieving tier 3.0 by July 2028 and tier 4.0 by July 2030) with a requirement that cybersecurity programs be based on "a nationally recognized standard for governmental entities," with biennial maturity level reports to legislative committees beginning in 2027

Expands the Information Technology Executive Council from 13 to 17 voting members by adding the executive chief information security officer, two Board of Regents IT employees, and converting four legislative members from nonvoting to voting status

Requires the executive branch CISO to conduct periodic cybersecurity assessments of each executive branch agency and report noncompliant agencies to the legislative budget committee by October 1, 2028, with noncompliant agencies required to present remediation plans; appropriations committees may reduce IT/cybersecurity funding by 10% for noncompliant agencies

Mandates that all state government websites be hosted on ".gov" domains and requires all state agency IT and cybersecurity expenditures be appropriated as separate budget line items for detailed legislative review