Michigan § 388.1697g - Statewide Security Operations Center; Managed Detection and Response solution cybersecurity risk assessments.

(1) From the state school aid fund money appropriated in section 11, there is allocated for 2023-2024 only, $9,000,000.00 to an intermediate district with K to 12 pupil membership between 37,500 and 42,500, as reported in the 2021-2022 MI School Data Student Enrollment Counts Report school year final student count, to establish and operate a statewide Security Operations Center (SOC) in partnership with a statewide educational organization. The SOC will provide a Managed Detection and Response (MDR) solution, including SOC staff, to monitor and assist in responding to threats and attacks on critical technology infrastructure for districts and intermediate districts.

(2) The intermediate district receiving funds under this section shall contract with a nonprofit educational organization that maintains a statewide educational technology collaborative to establish the statewide SOC. This statewide SOC will operate under the guidance of an advisory board, comprising educational technology leaders, with regional statewide representation. Other K to 12 stakeholders may be invited to participate in the advisory.

(3) The nonprofit educational organization that the intermediate district contracted with in subsection (2) shall use the funds to do all of the following:

(a) Establish a statewide advisory.

(b) Establish a statewide SOC security team.

(c) Establish statewide MDR service.

(d) Train district technology staff in the deployment and use of MDR software and services.

(e) Purchase and distribute MDR licensing to districts and intermediate districts for installation on critical technology infrastructure.

(f) Train, monitor, and track district utilization of a toolkit to be identified by the SOC such as MISecure Quick Self-Assessment.

(g) Not later than January 1, 2025 and each subsequent fiscal year, prepare a summary report that includes measurable outcomes including participation, detection, prevention, and response to cybersecurity incidents in order to evaluate the effectiveness of the project. The report must be submitted to the house and senate appropriations subcommittees on school aid and to the house and senate fiscal agencies.

(4) After the nonprofit educational organization that the intermediate district contracted with in subsection (2) uses funds as required under subsection (3), the nonprofit educational organization may use any remaining funds to do any of the following:

(a) Supply additional cybersecurity services as technologies evolve and budget allows.

(b) Partner with K to 12 statewide connectivity partners to install and monitor intrusion detection systems.

(5) Districts receiving software and service under this project shall do both of the following:

(a) Complete the assessment identified in subsection (3)(f) annually.

(b) Install and maintain statewide SOC MDR software on critical infrastructure as described in this section, provide access to the software to the statewide SOC, and coordinate responses with the statewide SOC and the district's intermediate district.

(6) For districts that have MDR solutions in place as of October 1, 2023, a licensing cost allocation equal to the cost of the statewide SOC provided license may be provided until the end of the local contract or the end of the funding period, whichever comes first. Funds allocated under this subsection must be used to offset local MDR costs, cybersecurity assessment, or further cybersecurity investment.

(7) The funds allocated under this section for 2023-2024 are a work project appropriation, and any unexpended funds for 2023-2024 are carried forward and may be expended in subsequent years until the end of the 2027-2028 state fiscal year. The purpose of the work project is to increase stable and reliable cybersecurity in districts and intermediate districts. The estimated completion date of the work project is September 30, 2028.

(8) Notwithstanding section 17b, the department shall make payments under this section on a schedule determined by the department.

(9) Notwithstanding section 18a, funds allocated under this section may be available for expenditure until September 30, 2028. A recipient of funding under this section must return any unexpended funds to the department in the manner prescribed by the department by not later than October 30, 2028.