Menu

State Budget

2022 Session

Budget Amendments - HB30 (Member Request)

View Budget Item
View Budget Item amendments

Chief Patron: Reid
Cybersecurity as a Service

Item 93 #2h

Item 93 #2h

 First Year - FY2023 Second Year - FY2024
Administration
Virginia Information Technologies Agency FY2023 $1,700,000 FY2024 $1,700,000 GF

Language
Page 79, line 42, strike "$52,932,842" and insert "$54,632,842".
 Page 79, line 42, strike "$54,623,639" and insert "$56,323,639".

Page 81, after line 6, insert:

"Out of this appropriation, $1,700,000 each year from the general fund is provided for the Virginia Information Technologies Agency (VITA), with support from and in coordination with the Virginia State Police, the Virginia Department of Education, and other agencies as appropriate, and as funding permits, to pilot the procurement of cybersecurity solutions to offer local public school divisions to assist in monitoring, management, and reporting of cybersecurity risks. The agencies shall collaborate on the requirements, with the following being taken into consideration: (i) the solution should provide comprehensive cybersecurity tools, such as vulnerability scanning, threat assessment, and DNS filtering, to assist school divisions in reducing cybersecurity threats; (ii) the solution should use cloud hosting and capabilities wherever possible; (iii) the solution should be capable of assessing and monitoring both on-premises resources and resources in cloud environments; (iv) the solution should include pre-built workflows correlated to standard cybersecurity frameworks such as those published by the National Institute of Standards and Technology (NIST), International Organization for Standardization (ISO), and the Cybersecurity and Infrastructure Security Agency (CISA), to accelerate time-to-value and time-to-protection; (v) the solution should allow customization of workflows and technologies as necessary to align with organizational operations, while continuing to achieve the overall objectives; (vi) the solution should aggregate various sensors, correlate the results back to a risk management framework (RMF), and provide VITA and the Virginia State Police with a Common Operating Picture; (vii) the solution should have automation workflows, procedures, processes, and policies that are customizable and shareable to reduce time-to-implement; and (viii) the solution should include a dashboard/visualization capability that allows for both a holistic view of the cybersecurity risk across the Commonwealth and dashboards that provide each participating school division with a view of its particular data and risks. The pilot shall last for an initial period of no less than three years. This solution shall be offered at no cost to participating local school districts. VITA shall report on the progress, results, challenges, and costs of this pilot program annually, with the first such report due to the Governor, and Chairs of the House Appropriations and Senate Finance and Appropriations Committee by July 31, 2023."

Explanation

(This amendment provides funding for a K-12 Cybersecurity as a Service pilot. The pilot, administered by the Virginia Information Technologies Agency, in concert with the Virginia State Police, the Virginia Department of Education, and other agencies as appropriate, shall direct the procurement of cybersecurity solutions to offer local public school divisions to assist in monitoring, management, and reporting of cybersecurity risks. The pilot is to last for an initial period of no less than three years and the resulting solution offered at no cost to participating local school districts. This is a placeholder amendment until a final fiscal impact statement is produced.)

The Budget Process

Amendment Resources

Committee Resources

  • Committee Website HAC | SFAC 
  • Legislation in Committee HAC | SFAC 

Budget Resources

virginia general assembly seal