1. (a) Each local school system shall:

   1. (1) Designate a local point of contact for all cybersecurity-related communications; and

   2. (2) Notify the State Chief Information Security Officer of:

      1. (i) The designation; and
      2. (ii) Any subsequent update to the designation.

2. (b)

   1. (1) Beginning in 2027, each local school system shall:

      1. (i) Comply with the State minimum cybersecurity standards established by the Department of Information Technology; and
      2. (ii) Conduct a cybersecurity maturity assessment every 2 years.
   2. (2) On or before June 30, 2027, and each June 30 every 2 years thereafter, each local school system shall certify to the Office of Security Management within the Department of Information Technology compliance with the State minimum cybersecurity standards established by the Department of Information Technology.

Added by Acts 2026, c. 34, § 1, eff. July 1, 2026; Acts 2026, c. 35, § 1, eff. July 1, 2026.