TX HB150

Establishes the Texas Cyber Command as a new state agency to prevent and respond to cybersecurity incidents affecting government entities and critical infrastructure, led by a governor-appointed chief serving two-year terms

Transfers cybersecurity-related powers and duties from the Department of Information Resources to the new command, including network security services, threat intelligence operations, incident response, and digital forensics capabilities

Requires state agencies and local governments to report cybersecurity incidents to the command within 48 hours of discovery, with detailed follow-up reports within 10 business days of incident resolution

Mandates annual cybersecurity training for all government employees and officials with access to information resources, and requires biennial security assessments and penetration tests for state agencies

Sets a transition deadline of December 31, 2026 for transferring all cybersecurity functions, employees, contracts, and appropriations from the Department of Information Resources to the Texas Cyber Command, with the agency subject to Sunset review by September 1, 2031