Committee unanimously backs bill to trigger IT security audits for unresolved vulnerabilities

Senate Bill 185, introduced by Senator Basley with co-sponsorship from the Joint Technology Committee, would strengthen legislative oversight of statewide IT security. The bill requires the chief security officer to submit annual IT security compliance reports and a statewide IT security risk assessment; if findings remain unresolved for two years or material discrepancies are found, the Legislative Audit Committee may be asked to order a special IT security audit.

Sponsor Senator Marchman said the bill is a measured step that preserves legislative oversight without overreaching on executive authority; the Office of the Auditor requested a drafting amendment (L001) that was adopted. The committee recorded a unanimous favorable recommendation to Appropriations.

Committee members emphasized the bill’s role as a corrective and oversight tool, not a prescriptive management regime; sponsors and auditors said the legislation includes a conditional cash-fund appropriation to cover audits only if one is requested. The bill now proceeds to Appropriations.