York County News

Senator Kristin Phillips-Hill has introduced a series of legislative measures aimed at enhancing Pennsylvania's cybersecurity framework. These initiatives are designed to protect state assets and prevent data breaches by aligning the Commonwealth with industry best practices.

"Cyber threats are escalating, and Pennsylvania must act now to safeguard personal data and critical systems," Phillips-Hill stated. She emphasized that the proposed bills would "strengthen cybersecurity measures, enhance oversight, and improve government responsiveness to digital threats."

The key components of the legislative package include mandating that all state IT contracts adhere to federal cybersecurity standards as outlined by the National Institute of Standards and Technology (NIST). This requirement is intended to reduce vulnerabilities and fortify security.

Another significant proposal involves elevating the role of the Commonwealth’s Chief Information Officer (CIO) to a cabinet-level position. This change aims to improve coordination and efficiency in managing IT security and infrastructure.

To further strengthen state cybersecurity, the package mandates updated security standards, requires biannual audits by leading cybersecurity firms, and calls for the creation of a bipartisan committee dedicated to ongoing oversight and policy recommendations.

The legislation also addresses ransomware attacks by criminalizing possession and use of ransomware. It prohibits state agencies from paying ransom demands while ensuring robust recovery protocols are in place.

Additionally, Phillips-Hill proposes banning TikTok on state-owned devices due to national security concerns. This aligns Pennsylvania with policies already adopted by 39 other states as well as federal guidelines, including a similar policy instituted by Pennsylvania Treasurer Stacy Garrity.

"We cannot afford to be reactive on cybersecurity. These bills take a decisive, proactive approach to protecting taxpayer dollars, personal information, and the Commonwealth’s IT infrastructure," added Phillips-Hill.

The legislative package reflects a commitment to shielding Pennsylvania from emerging cyber threats while positioning it as a leader in digital security. The proposed reforms aim to safeguard infrastructure, enhance public trust, and prevent costly breaches before they occur.

The legislation will now be referred to standing committees in the Senate for further consideration.