1. (a) In this section, "contractor" includes a subcontractor, officer, or employee of the contractor.
2. (b) A state agency shall require any contractor who has access to a state computer system or database to complete a cybersecurity training program certified under Section 2063.102 as selected by the agency.
3. (c) The cybersecurity training program must be completed by a contractor during the term of the contract and during any renewal period.
4. (d) Required completion of a cybersecurity training program must be included in the terms of a contract awarded by a state agency to a contractor.

5. (e) A contractor required to complete a cybersecurity training program under this section shall verify completion of the program to the contracting state agency. The person who oversees contract management for the agency shall:

   1. (1) not later than August 31 of each year, report the contractor's completion to the command; and

   2. (2) periodically review agency contracts to ensure compliance with this section.

      Transferred, redesignated and amended from Government Code, Section 2054.5192 by Acts 2025, 89th Leg., R.S., Ch. 331 (H.B. 150), Sec. 6, eff. September 1, 2025.

Added by Acts 2019, 86th Leg., R.S., Ch. 1308 (H.B. 3834), Sec. 3, eff. June 14, 2019.

Acts 2021, 87th Leg., R.S., Ch. 856 (S.B. 800), Sec. 12, eff. September 1, 2021.