SB70: Bill Text

SB70,,619 16.973 (3) Facilitate the implementation of statewide initiatives, including development and maintenance of policies and programs to protect the privacy of individuals who are the subjects of information contained in the databases of agencies or security operations centers and regional security operations centers under s. 16.978, and of technical standards and sharing of applications among agencies, security operations centers and regional security operations centers, and any participating local governmental units or other eligible entities, as defined in s. 16.978 (1) (c), or entities in the private sector.

SB70,184 Section 184. 16.973 (8) of the statutes is amended to read:

SB70,,621 16.973 (8) Offer the opportunity to local governmental units and other eligible entities, as defined in s. 16.978 (1) (c), as determined by the department, to voluntarily obtain computer or supercomputer services from the department or a security operations center or regional security operations center under s. 16.978 when those services are provided under s. 16.972 (2) (b) or (c) or 16.978, and to voluntarily participate in any master contract established by the department or a security operations center or regional security operations center under s. 16.972 (2) (h) or 16.978 or in the use of any informational system or device provided by the department or a security operations center or regional security operations center under s. 16.974 (3) or 16.978.

SB70,185 Section 185. 16.978 of the statutes is created to read:

SB70,,623 16.978 Security operations centers. (1) Definitions. In this section:

SB70,,624 (a) Notwithstanding s. 16.97 (1m), “agency” includes each authority.

SB70,,625 (b) “Division” means the division of enterprise technology in the department.

SB70,,626 (c) “Eligible entity” means all of the following:

SB70,,627 1. An agency.

SB70,,628 2. A local governmental unit.

SB70,,629 3. An educational agency, as defined in s. 16.99 (2g).

SB70,,630 4. A federally recognized American Indian tribe or band located in this state.

SB70,,631 5. A critical infrastructure entity, as determined by the division.

SB70,,632 6. Any other entity identified by the department by rule.

SB70,,633 (d) “Managed security services” means services intended to reduce the impact of cybersecurity threats.

SB70,,634 (2) Establishment of security operations centers. (a) The department shall establish one or more security operations centers or one or more regional security operations centers, or both, to provide for the cybersecurity of information technology systems maintained by eligible entities.

SB70,,635 (b) All security operations centers, including regional centers, established by the department shall be under the supervision and control of the division. The department shall include the centers in carrying out its responsibilities, powers, and duties under ss. 16.971 (2) (b), (c), (cm), (g), (h), and (k), 16.972 (2) (d) and (e), and 16.973 (1), (3), (4), and (5), as determined by the department.

SB70,,636 (c) The department may coordinate with any of the following entities in the establishment of a security operations center or regional security operations center:

SB70,,637 1. A campus, as defined in s. 36.05 (3).

SB70,,638 2. A college campus, as defined in s. 36.05 (6m).

SB70,,639 3. An institution, as defined in s. 36.05 (9).

SB70,,640 4. A university, as defined in s. 36.05 (13).

SB70,,641 (3) Duties of the division. (a) The division shall manage the operation of each security operations center and regional security operations center established under sub. (2), including by establishing managed security services guidelines and standard operating procedures for the operation of the centers.

SB70,,642 (b) As appropriate and in coordination with participating eligible entities, the division may provide, and if provided, shall oversee the provision of, managed security services and other support through each security operations center and regional security operations center, including all of the following:

SB70,,643 1. Real-time security monitoring to detect and respond to cybersecurity events that may jeopardize this state or the residents of this state.

SB70,,644 2. Continuous, 24-hour alerts and guidance for defeating cybersecurity threats.

SB70,,645 3. Immediate incident response to counter cyber activity that exposes this state or the residents of this state to cybersecurity risks.

SB70,,646 4. Educational services regarding cybersecurity.

SB70,,647 5. Dissemination of incident-related information to supported eligible entities, constituents, and external parties.

SB70,,648 (c) In operating the security operations centers and regional security operations centers, including functions such as detecting, analyzing, responding to, and prioritizing responses to cybersecurity incidents, the division shall do all of the following:

SB70,,649 1. Collaborate with any relevant state, local, federal, critical infrastructure, or tribal entity in accordance with statewide plans.

SB70,,650 2. Lead executive branch agencies through cybersecurity incidents, including by directing and prioritizing cybersecurity incident responses, and provide guidance and expertise to other eligible entities that may be affected by such events.

SB70,,651 3. If needed to respond to a substantial external cybersecurity threat, take any action, including disconnecting the computer network of an eligible entity receiving managed security services.

SB70,,652 (d) The division shall ensure that each agency in the executive branch of state government uses the division’s managed security services to the extent practicable. No executive branch agency may purchase managed security services from a person other than the department unless the division determines that the division cannot provide comparable managed security services at a reasonable cost and the division approves the purchase. The division shall establish a process for making such determinations and approvals.

SB70,,653 (4) Powers of the division. The division may do all of the following:

SB70,,654 (a) Enter into contracts and interagency agreements as necessary to administer this section.

SB70,,655 (b) Apply for and use the proceeds from grants to administer this section.

SB70,,656 (c) Charge fees to recover costs associated with the division’s provision of managed security services and other cybersecurity support services provided under this section, including via an assessment to agencies or as a component of any services provided.

SB70,,657 (5) Center facilities. The division may establish a security operations center, including a regional center, only at a facility that satisfies all of the following:

SB70,,658 (a) The facility is a secure and restricted facility that contains cybersecurity infrastructure, an available trained workforce, and supportive educational capabilities.

SB70,,659 (b) All entrances and critical areas can be controlled and monitored to prevent unauthorized entry.

SB70,,660 (c) Access can be limited to only authorized individuals.

SB70,,661 (d) Security alarms can be monitored by local law enforcement or security companies according to service availability.

SB70,,662 (e) Operational information can be restricted to personnel at the facility, except as coordinated and approved by both the division and the participating eligible entity.

SB70,186 Section 186. 16.9945 of the statutes is repealed.

SB70,187 Section 187. 17.03 (10m) of the statutes is created to read:

SB70,,665 17.03 (10m) If the office is filled by appointment of the governor for a fixed term by and with the advice and consent of the senate, the incumbent’s term expires or, if later, the governor submits his or her nomination for the office to the senate.

SB70,188 Section 188. 17.18 of the statutes is amended to read:

SB70,,667 17.18 Vacancies, U.S. senator and representative in congress; how filled. Vacancies in the office of U.S. senator or representative in congress from this state shall be filled by election, as provided in s. 8.50 (4) (b), for the residue of the unexpired term (4m).

SB70,189 Section 189. 18.08 (7) of the statutes is created to read:

SB70,,669 18.08 (7) Notwithstanding sub. (3), no moneys transferred under 2023 Wisconsin Act .... (this act), section 9251 (1), may be commingled with other moneys in the capital improvement fund and all earnings on or income from investments of the moneys transferred under 2023 Wisconsin Act .... (this act), section 9251 (1), and all excess moneys so transferred that are not used to fund building projects authorized in the 2023-25 Authorized State Building Program, shall be deposited in or transferred to the general fund.

SB70,190 Section 190. 18.16 (title) of the statutes is amended to read:

SB70,,671 18.16 (title) Minority financial advisers and investment firms; disabled; veteran-owned; lesbian, gay, bisexual, or transgender-owned; and disability-owned financial advisers and investment firms.

SB70,191 Section 191. 18.16 (1) (a) of the statutes is renumbered 18.16 (1) (e) and amended to read:

SB70,,673 18.16 (1) (e) “Disabled veteran-owned Veteran-owned financial adviser” means a financial adviser certified by the department of administration under s. 16.283 (3).

SB70,192 Section 192. 18.16 (1) (ae) of the statutes is created to read:

SB70,,675 18.16 (1) (ae) “Disability-owned financial adviser” means a financial adviser certified by the department of administration under s. 16.289 (3).

SB70,193 Section 193. 18.16 (1) (af) of the statutes is created to read:

SB70,,677 18.16 (1) (af) “Disability-owned investment firm” means an investment firm certified by the department of administration under s. 16.289 (3).

SB70,194 Section 194. 18.16 (1) (b) of the statutes is renumbered 18.16 (1) (f) and amended to read:

SB70,,679 18.16 (1) (f) “Disabled veteran-owned Veteran-owned investment firm” means an investment firm certified by the department of administration under s. 16.283 (3).

SB70,195 Section 195. 18.16 (1) (br) of the statutes is created to read:

SB70,,681 18.16 (1) (br) “Lesbian, gay, bisexual, or transgender-owned financial adviser” means a financial adviser certified by the department of administration under s. 16.288 (3).

SB70,196 Section 196. 18.16 (1) (bs) of the statutes is created to read:

SB70,,683 18.16 (1) (bs) “Lesbian, gay, bisexual, or transgender-owned investment firm” means an investment firm certified by the department of administration under s. 16.288 (3).

SB70,197 Section 197. 18.16 (2) (b) of the statutes is amended to read:

SB70,,685 18.16 (2) (b) Except as provided in sub. (7), in contracting public debt by competitive sale, the commission shall make efforts to ensure that at least 1 percent of the total public indebtedness contracted in each fiscal year is underwritten by disabled veteran-owned investment firms.

SB70,198 Section 198. 18.16 (2) (c) of the statutes is created to read:

SB70,,687 18.16 (2) (c) Except as provided in sub. (7), in contracting public debt by competitive sale, the commission shall make efforts to ensure that at least 1 percent of the total public indebtedness contracted in each fiscal year is underwritten by lesbian, gay, bisexual, or transgender-owned investment firms.

SB70,199 Section 199. 18.16 (2) (d) of the statutes is created to read:

SB70,,689 18.16 (2) (d) Except as provided in sub. (7), in contracting public debt by competitive sale, the commission shall make efforts to ensure that at least 1 percent of the total public indebtedness contracted in each fiscal year is underwritten by disability-owned investment firms.

SB70,200 Section 200. 18.16 (3) (b) of the statutes is amended to read:

SB70,,691 18.16 (3) (b) Except as provided under sub. (7), in contracting public debt by negotiated sale, the commission shall make efforts to ensure that at least 1 percent of total public indebtedness contracted in each fiscal year is underwritten by disabled veteran-owned investment firms.

SB70,201 Section 201. 18.16 (3) (c) of the statutes is created to read:

SB70,,693 18.16 (3) (c) Except as provided under sub. (7), in contracting public debt by negotiated sale, the commission shall make efforts to ensure that at least 1 percent of total public indebtedness contracted in each fiscal year is underwritten by lesbian, gay, bisexual, or transgender-owned investment firms.

SB70,202 Section 202. 18.16 (3) (d) of the statutes is created to read:

SB70,,695 18.16 (3) (d) Except as provided under sub. (7), in contracting public debt by negotiated sale, the commission shall make efforts to ensure that at least 1 percent of total public indebtedness contracted in each fiscal year is underwritten by disability-owned investment firms.

SB70,203 Section 203. 18.16 (4) (b) of the statutes is amended to read:

SB70,,697 18.16 (4) (b) Except as provided under sub. (7), in contracting public debt by competitive sale or negotiated sale, the commission shall make efforts to ensure that at least 1 percent of the total moneys expended in each fiscal year for the services of financial advisers are expended for the services of disabled veteran-owned financial advisers.

SB70,204 Section 204. 18.16 (4) (c) of the statutes is created to read:

SB70,,699 18.16 (4) (c) Except as provided under sub. (7), in contracting public debt by competitive sale or negotiated sale, the commission shall make efforts to ensure that at least 1 percent of the total moneys expended in each fiscal year for the services of financial advisers are expended for the services of lesbian, gay, bisexual, or transgender-owned financial advisers.

SB70,205 Section 205. 18.16 (4) (d) of the statutes is created to read:

SB70,,701 18.16 (4) (d) Except as provided under sub. (7), in contracting public debt by competitive sale or negotiated sale, the commission shall make efforts to ensure that at least 1 percent of the total moneys expended in each fiscal year for the services of financial advisers are expended for the services of disability-owned financial advisers.

SB70,206 Section 206. 18.16 (5) (b) of the statutes is amended to read:

SB70,,703 18.16 (5) (b) Except as provided under s. 18.06 (9) and sub. (7), an individual underwriter or syndicate of underwriters shall make efforts to ensure that each bid or proposal, submitted by that individual or syndicate in a competitive or negotiated sale of public debt, provides for at least 1 percent of sales to disabled veteran-owned investment firms.

SB70,207 Section 207. 18.16 (5) (c) of the statutes is created to read:

SB70,,705 18.16 (5) (c) Except as provided under sub. (7) and s. 18.06 (9), an individual underwriter or syndicate of underwriters shall make efforts to ensure that each bid or proposal, submitted by that individual or syndicate in a competitive or negotiated sale of public debt, provides for at least 1 percent of sales to lesbian, gay, bisexual, or transgender-owned investment firms.

SB70,208 Section 208. 18.16 (5) (d) of the statutes is created to read:

SB70,,707 18.16 (5) (d) Except as provided under sub. (7) and s. 18.06 (9), an individual underwriter or syndicate of underwriters shall make efforts to ensure that each bid or proposal, submitted by that individual or syndicate in a competitive or negotiated sale of public debt, provides for at least 1 percent of sales to disability-owned investment firms.