House File 698 - Introduced HOUSE FILE 698 BY COMMITTEE ON APPROPRIATIONS (SUCCESSOR TO HF 139) (SUCCESSOR TO HSB 14) A BILL FOR An Act establishing the cybersecurity simulation training 1 center at the Iowa state university of science and 2 technology, and including contingent effective date 3 provisions. 4 BE IT ENACTED BY THE GENERAL ASSEMBLY OF THE STATE OF IOWA: 5 TLSB 1262HZ (2) 90 jda/jh

H.F. 698 Section 1. NEW SECTION . 266.50 Cybersecurity simulation 1 training center. 2 1. The cybersecurity simulation training center is 3 established in the center for cybersecurity innovation 4 and outreach at the Iowa state university of science and 5 technology. 6 2. The cybersecurity simulation training center shall 7 conduct and sponsor research and activities that enable persons 8 to develop strategies to counter cybersecurity threats and 9 mitigate the damage resulting from a cybersecurity attack. 10 3. The cybersecurity simulation training center shall be 11 available to businesses, nonprofit entities, state agencies, 12 political subdivisions of the state, students, and educators, 13 and shall support all of the following: 14 a. Cybersecurity training exercises. 15 b. Case studies. 16 c. Student events and competitions. 17 d. Training exercises for educators. 18 e. Cybersecurity workforce development. 19 4. In the case of state agencies and political subdivisions 20 that use the cybersecurity simulation training center, the 21 cybersecurity simulation training center shall do all of the 22 following: 23 a. Coordinate with the office of the chief information 24 officer to ensure that all activities and other programming 25 provided to the state agency or political subdivision are 26 consistent with the cybersecurity strategic plan and executive 27 cyber practices. 28 b. Incorporate current information related to cybersecurity 29 rules, standards, policies, guidance, and recommendations 30 promulgated by the office of the chief information officer 31 into cybersecurity training activities, workforce development 32 efforts, and similar services. 33 5. This section shall not be construed to authorize the 34 cybersecurity simulation training center to do any of the 35 -1- LSB 1262HZ (2) 90 jda/jh 1/ 3

H.F. 698 following: 1 a. Perform live security monitoring services for businesses, 2 nonprofit entities, state agencies, or political subdivisions, 3 or offer to perform such services. 4 b. License the use of the cybersecurity simulation training 5 center’s facilities to any person for the promotion of live 6 security monitoring services to be provided by such person. 7 Sec. 2. CODE EDITOR DIRECTIVE. The Code editor may 8 designate section 266.50, as enacted in this Act, as a new 9 subchapter within chapter 266, entitled “cybersecurity 10 simulation training center”. 11 Sec. 3. CONTINGENT EFFECTIVE DATE. This Act takes effect 12 July 1, 2023, if legislation is enacted appropriating moneys 13 for the purpose of the cybersecurity simulation training center 14 established pursuant to section 266.50, as enacted in this Act. 15 EXPLANATION 16 The inclusion of this explanation does not constitute agreement with 17 the explanation’s substance by the members of the general assembly. 18 This bill establishes the cybersecurity simulation training 19 center at the Iowa state university of science and technology, 20 contingent upon the enactment of legislation appropriating 21 moneys to the center. The bill requires the center to conduct 22 and sponsor research and activities that enable persons 23 to develop strategies to counter cybersecurity threats and 24 mitigate the damage resulting from a cybersecurity attack. 25 The bill provides that the center shall be available to 26 businesses, nonprofit entities, state agencies, political 27 subdivisions of the state, students, and educators, and shall 28 support cybersecurity training exercises, case studies, student 29 events and competitions, training exercises for educators, 30 and cybersecurity workforce development. The bill requires 31 state agencies and political subdivisions that use the 32 center to coordinate with the office of the chief information 33 officer to ensure that all activities are consistent with 34 the cybersecurity strategic plan and incorporate current 35 -2- LSB 1262HZ (2) 90 jda/jh 2/ 3

H.F. 698 information related to cybersecurity standards promulgated by 1 the office into cybersecurity training activities. 2 The bill does not authorize the center to perform live 3 security monitoring services, offer to perform live security 4 monitoring services, or license the use of the center’s 5 facilities for the promotion of live security monitoring 6 services. 7 The bill takes effect July 1, 2023, if legislation is enacted 8 appropriating moneys for the purpose of the center. 9 -3- LSB 1262HZ (2) 90 jda/jh 3/ 3