1. (a) A cybersecurity client:

   1. (1) shall notify the state police department upon the occurrence of a cybersecurity incident before requesting response capabilities of the civilian cyber corps; and
   2. (2) may, upon recognition of a potential security vulnerability that could lead to a cybersecurity incident, request the adjutant general to deploy one (1) or more civilian cyber corps volunteers to provide rapid response assistance to the cybersecurity client.

2. (b) The adjutant general may, at the adjutant general's discretion, initiate:

   1. (1) the deployment of a civilian cyber corps volunteer; or

   2. (2) the nondeployment of a civilian cyber corps adviser;

      upon recognition of a potential security vulnerability that could lead to a cybersecurity incident and at the request of the cybersecurity client.

3. (c) To initiate the deployment of a civilian cyber corps volunteer to provide assistance to a cybersecurity client, the adjutant general shall indicate in writing that the civilian cyber corps volunteer is authorized to provide assistance to the cybersecurity client. A single written document may initiate the deployment of more than one (1) civilian cyber corps volunteer.
4. (d) The adjutant general may enter into a contract with a cybersecurity client as a condition of providing assistance to the cybersecurity client through the civilian cyber corps.
5. (e) Acceptance by a cybersecurity client of assistance from a civilian cyber corps volunteer under this chapter shall be made by the cybersecurity client in writing.

6. (f) The adjutant general shall maintain a written document initiating the deployment of a civilian cyber corps volunteer to provide assistance to a cybersecurity client for:

   1. (1) six (6) years after the end of the deployment; or

   2. (2) the length of time required under the adjutant general's record retention policies;

      whichever is longer.

7. (g) At the discretion of the adjutant general, the deployment of a civilian cyber corps volunteer may be extended in writing in the same manner as the initial deployment.

As added by P.L.94-2026, SEC.40.