Colorado § 24-33.5-1902 - Colorado cybersecurity council - creation - council members.

§ 24-33.5-1902. Colorado cybersecurity council - creation - council members.

(1) The Colorado cybersecurity council is created within the department of public safety using existing resources. The council operates as a steering group to develop cybersecurity policy guidance for the governor; develop comprehensive sets of prioritized goals, requirements, initiatives, and milestones; and coordinate with the general assembly and the judicial branch regarding cybersecurity as deemed necessary and appropriate by the council. In addition, the council may:

(a) Develop a whole-of-state cybersecurity approach for the state and for local governments, including the coordination and setting of strategic statewide cybersecurity goals, roadmaps, and best practices;

(b) Review the need to conduct risk assessments of local government systems, providing additional cybersecurity services to local governments, and proposing necessary statutory or policy changes; and

(c) Make recommendations to the governor and general assembly about cybersecurity.

(2) The Colorado cybersecurity council is comprised of the following members:

(a) Repealed.

(b) The chief information officer of the governor's office of information technology, or the chief information officer's designee;

(c) The chief information security officer of the governor's office of information technology, or the chief information security officer's designee;

(d) The executive director of the department of public safety, or the executive director's designee;

(e) A representative of the Colorado National Guard to be appointed by the adjutant general of the department of military and veterans affairs;

(f) to (p) Repealed.

(q) The director of the division of homeland security and emergency management in the department of public safety, or the director's designee;

(r) Repealed.

(s) A representative of an organization that represents Colorado municipal governments;

(t) The secretary of state or the secretary's designee;

(u) Two representatives from county governments, one of whom represents a rural county; and

(v) Any other person deemed necessary and appropriate by the executive director of the department of public safety.

(3) The council does not have any direct authority over the university of Colorado at Colorado Springs.

(4) Nothing in this section shall be construed to interfere with the duties of the chief information security officer pursuant to part 4 of article 37.5 of this title.

Source: L. 2016: Entire part added, (HB 16-1453), ch. 189, p. 667, § 1, effective July 1. L. 2021: (1) and (2)(q) amended, (2)(g), (2)(h), (2)(i), (2)(j), (2)(k), (2)(n), (2)(o), and (2)(r) repealed, and (2)(s), (2)(t), (2)(u), and (2)(v) added, (HB 21-1236), ch. 211, p. 1095, § 3, effective September 7. L. 2026: IP(1), (1)(b), (1)(c), and (2)(v) amended and (2)(a), (2)(f), (2)(l), (2)(m), and (2)(p) repealed, (HB 26-1252), ch. 382, p. 2383, § 19, effective August 12.