York County News

The Pennsylvania State Senate has recently passed legislation aimed at strengthening the cybersecurity defenses of the state's information technology (IT) contracts. The legislation, spearheaded by Senator Phillips-Hill, comes in the wake of a cyberattack on the Pennsylvania court system and the increasing number of cyberattacks on state government agencies.

Senator Phillips-Hill emphasized the need for enhanced cybersecurity measures to protect the valuable data of every Pennsylvanian. She highlighted the recent cyberattacks on multiple state agencies, including the Department of Labor and Industry, Department of Human Services, Department of Education, Department of Health, and the Pennsylvania court system. These incidents underscore the urgency to fortify the cybersecurity defenses and shield sensitive data.

"To achieve this, we must utilize the best tools and procedures available on the market," said Senator Phillips-Hill. The legislation focuses on adopting gold-standard cybersecurity practices and sets cybersecurity standards for IT procurement within state government.

One of the key provisions of the legislation is the requirement for any acquisition of computer hardware by the state to adhere to the National Institute of Standards and Technology (NIST) guidelines for computer security. NIST's comprehensive approach includes standards, guidelines, and best practices that effectively manage cybersecurity-related risks. These practices align with those adopted by the U.S. Government in all its IT procurements.

The passage of Senate Bill 745 by the State Senate is a crucial step in bolstering cybersecurity across state government. However, the legislation is now pending further consideration in the House of Representatives before it can become law.

The recent cyberattacks and data breaches on state agencies highlight the need for proactive measures to protect sensitive information. By implementing gold-standard cybersecurity practices and adhering to NIST guidelines, Pennsylvania aims to showcase its ability to stand resilient against cyber adversaries.

In the face of increasing cyber threats, it is essential for state governments to prioritize cybersecurity and take proactive steps to fortify their defenses. The passage of this legislation is a significant step towards ensuring the protection of valuable data and the privacy of every Pennsylvanian.