SB18-086.pdf

The State of Colorado is introducing a bill to protect state records containing sensitive and confidential information from cyber threats, unauthorized manipulation, or theft. The bill requires the chief information security officer, director of the office of information technology, department of state, and executive director of the department of regulatory agencies to take actions to protect state records. These actions include identifying and mitigating cyber threats, assessing data systems, and developing metrics to monitor data system security. The bill also encourages the use of distributed ledger technologies, such as blockchains, to improve data security, accountability, and transparency. Institutions of higher education are allowed to include distributed ledger technologies in their curricula and research, and the university of Colorado at Colorado Springs may consider developing a center of excellence on cybersecurity. The bill aims to reduce fraud, protect privacy, and support accountability and auditing in state-controlled programs.