Each state agency shall designate an information security officer who:

1. (1) reports to the agency's executive-level management;
2. (2) has authority over information security for the entire agency;
3. (3) possesses the training and experience required to ensure the agency complies with requirements and policies established by the command; and

4. (4) to the extent feasible, has information security duties as the officer's primary duties.

   Transferred, redesignated and amended from Government Code, Section 2054.136 by Acts 2025, 89th Leg., R.S., Ch. 331 (H.B. 150), Sec. 10, eff. September 1, 2025.

Added by Acts 2017, 85th Leg., R.S., Ch. 955 (S.B. 1910), Sec. 4, eff. September 1, 2017.