An Act establishing a cybersecurity control and review commission


This bill would establish a standing body to advise the Commonwealth on issues related to cybersecurity. The Commission would be composed of general cybersecurity experts, specific issue experts, and legislative officials. It would be chaired by the Secretary of Technology Safety and Security or his designee. The would be tasked with recommending cybersecurity standards for state and local agencies that collect sensitive information, as well as private businesses contracting with the Commonwealth. They would also establish a voluntary cybersecurity accreditation for private businesses in the commonwealth to encourage good practices by both businesses and consumers.