AB43,,6276271. An agency.
AB43,,6286282. A local governmental unit.
AB43,,6296293. An educational agency, as defined in s. 16.99 (2g).
AB43,,6306304. A federally recognized American Indian tribe or band located in this state.
AB43,,6316315. A critical infrastructure entity, as determined by the division.
AB43,,6326326. Any other entity identified by the department by rule.
AB43,,633633(d) “Managed security services” means services intended to reduce the impact of cybersecurity threats.
AB43,,634634(2) Establishment of security operations centers. (a) The department shall establish one or more security operations centers or one or more regional security operations centers, or both, to provide for the cybersecurity of information technology systems maintained by eligible entities.
AB43,,635635(b) All security operations centers, including regional centers, established by the department shall be under the supervision and control of the division. The department shall include the centers in carrying out its responsibilities, powers, and duties under ss. 16.971 (2) (b), (c), (cm), (g), (h), and (k), 16.972 (2) (d) and (e), and 16.973 (1), (3), (4), and (5), as determined by the department.
AB43,,636636(c) The department may coordinate with any of the following entities in the establishment of a security operations center or regional security operations center:
AB43,,6376371. A campus, as defined in s. 36.05 (3).
AB43,,6386382. A college campus, as defined in s. 36.05 (6m).
AB43,,6396393. An institution, as defined in s. 36.05 (9).
AB43,,6406404. A university, as defined in s. 36.05 (13).
AB43,,641641(3) Duties of the division. (a) The division shall manage the operation of each security operations center and regional security operations center established under sub. (2), including by establishing managed security services guidelines and standard operating procedures for the operation of the centers.
AB43,,642642(b) As appropriate and in coordination with participating eligible entities, the division may provide, and if provided, shall oversee the provision of, managed security services and other support through each security operations center and regional security operations center, including all of the following:
AB43,,6436431. Real-time security monitoring to detect and respond to cybersecurity events that may jeopardize this state or the residents of this state.
AB43,,6446442. Continuous, 24-hour alerts and guidance for defeating cybersecurity threats.
AB43,,6456453. Immediate incident response to counter cyber activity that exposes this state or the residents of this state to cybersecurity risks.
AB43,,6466464. Educational services regarding cybersecurity.
AB43,,6476475. Dissemination of incident-related information to supported eligible entities, constituents, and external parties.
AB43,,648648(c) In operating the security operations centers and regional security operations centers, including functions such as detecting, analyzing, responding to, and prioritizing responses to cybersecurity incidents, the division shall do all of the following:
AB43,,6496491. Collaborate with any relevant state, local, federal, critical infrastructure, or tribal entity in accordance with statewide plans.
AB43,,6506502. Lead executive branch agencies through cybersecurity incidents, including by directing and prioritizing cybersecurity incident responses, and provide guidance and expertise to other eligible entities that may be affected by such events.
AB43,,6516513. If needed to respond to a substantial external cybersecurity threat, take any action, including disconnecting the computer network of an eligible entity receiving managed security services.
AB43,,652652(d) The division shall ensure that each agency in the executive branch of state government uses the division’s managed security services to the extent practicable. No executive branch agency may purchase managed security services from a person other than the department unless the division determines that the division cannot provide comparable managed security services at a reasonable cost and the division approves the purchase. The division shall establish a process for making such determinations and approvals.
AB43,,653653(4) Powers of the division. The division may do all of the following:
AB43,,654654(a) Enter into contracts and interagency agreements as necessary to administer this section.
AB43,,655655(b) Apply for and use the proceeds from grants to administer this section.