§ 75-7245 — Cybersecurity services; administration by chief information technology officer and chief information security officer of each branch; plans and project costs for certain information technology projects presented to the legislature

Kansas § 75-7245

• Jurisdiction: Kansas
• Ch. 75: STATE DEPARTMENTS; PUBLIC OFFICERS AND EMPLOYEES
• Art. 72: INFORMATION TECHNOLOGY

Text

(a) On and after July 1, 2027, all cybersecurity services for each branch of state government shall be administered by the chief information technology officer and the chief information security officer of such branch. All cybersecurity employees within the legislative and executive branches of state government shall work at the direction of the chief information technology officer of the branch.
(b) Prior to January 1, 2026:
(1) The information technology executive council shall develop a plan to integrate all executive branch information technology services into the office of information technology services. The council shall consult with each agency head when developing such plan.
(2) The judicial chief information technology officer shall develop an estimated project cost to provide information technology to judicial agencies and all employees of such agencies, including state and county-funded judicial branch district court employees. Such employees shall be required to use such state-issued information technology hardware. The project cost developed pursuant to this paragraph shall include, in consultation with the executive branch information technology officer, a plan to allow each piece of information technology hardware that is used by a judicial branch employee to access a judicial branch application to have access to the KANWIN network and an estimated project cost to develop a cybersecurity program for all judicial districts that complies with the national institute of standards and technology cybersecurity framework (CSF) 2.0, as in effect on July 1, 2024.
(c) The information technology executive council shall report the plan developed pursuant to subsection (b) to the senate standing committee on ways and means and the house standing committee on legislative modernization or its successor committee prior to January 15, 2026.
(d) Prior to February 1, 2025, every website that is maintained by a branch of government or state agency shall be moved to a ".gov" domain.
(e) On July 1, 2025, and each year thereafter, moneys appropriated from the state general fund to or any special revenue fund of any state agency for information technology and cybersecurity expenditures shall be appropriated as a separate line item and shall not be merged with other items of appropriation for such state agency to allow for detailed review by the senate committee on ways and means and the house of representatives committee on appropriations during each regular legislative session.
(f) The provisions of this section do not apply to state educational institutions as defined in K.S.A. 76-711, and amendments thereto.
(g) This section shall expire on July 1, 2026.
CAUTION: Section expires on July 1, 2026.

Legislative History

L. 2024, ch. 95, § 1; July 1.