Sec. 2054.5192.  CYBERSECURITY TRAINING REQUIRED: CERTAIN STATE CONTRACTORS.  (a)  In this section, "contractor" includes a subcontractor, officer, or employee of the contractor.
(b)  A state agency shall require any contractor who has access to a state computer system or database to complete a cybersecurity training program certified under Section 2054.519 as selected by the agency.
(c)  The cybersecurity training program must be completed by a contractor during the term of the contract and during any renewal period.
(d)  Required completion of a cybersecurity training program must be included in the terms of a contract awarded by a state agency to a contractor.
(e)  A contractor required to complete a cybersecurity training program under this section shall verify completion of the program to the contracting state agency.  The person who oversees contract management for the agency shall:
(1)  not later than August 31 of each year, report the contractor's completion to the department; and
(2)  periodically review agency contracts to ensure compliance with this section.
Added by Acts 2019, 86th Leg., R.S., Ch. 1308 (H.B. 3834), Sec. 3, eff. June 14, 2019.
Amended by: 
Acts 2021, 87th Leg., R.S., Ch. 856 (S.B. 800), Sec. 12, eff. September 1, 2021.