HOUSE BILL 72

56th legislature - STATE OF NEW MEXICO - second session, 2024

INTRODUCED BY

Debra M. Sariñana

 

 

 

 

 

AN ACT

RELATING TO CYBERSECURITY; CREATING THE CYBERSECURITY FUND; DIRECTING RULEMAKING TO ESTABLISH REQUIREMENTS AND PROCEDURES FOR DISBURSEMENTS FROM THE FUND; MAKING AN APPROPRIATION.

 

BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF NEW MEXICO:

     SECTION 1. [NEW MATERIAL] CYBERSECURITY FUND--CREATED--PURPOSE.--

          A. The "cybersecurity fund" is created as a nonreverting fund in the state treasury. The fund shall be administered by the cybersecurity office, and money in the fund is appropriated to the cybersecurity office for the purposes stated in Subsection B of this section. The fund consists of appropriations, bequests, distributions, donations, gifts, grants or money that otherwise accrues to the fund.

          B. Money in the cybersecurity fund shall be used for cyber attack response and recovery services of information technology systems or databases operated or owned by an agency of the executive, legislative or judicial branch of state government, a political subdivision of the state or a tribal entity.

          C. The cybersecurity office shall promulgate rules to govern administration of the cybersecurity fund. The rules shall specify the:

                (1) application process for disbursements from the fund;

                (2) criteria for disbursements from the fund;

                (3) review process for disbursement applications;

                (4) oversight process and requirements for how disbursements are used; and

                (5) requirements for reversions to the fund.

          D. Disbursements from the cybersecurity fund shall be made on warrants drawn by the secretary of finance and administration pursuant to vouchers signed by the state chief information security officer.

     SECTION 2. APPROPRIATION.--Thirty-five million dollars ($35,000,000) is appropriated from the general fund to the cybersecurity fund for expenditure in fiscal year 2025 and subsequent fiscal years for the purposes of the cybersecurity fund. Any unexpended or unencumbered balance remaining at the end of a fiscal year shall not revert to the general fund.

- 3 -