Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Legislative IT office outlines NIST-aligned cybersecurity upgrades, data storage in U.S., and row-based access controls
Summary
The Legislative Office of Information Technology Services described steps including U.S.-based Microsoft 365 storage, automated asset inventory, 24/7 SOC monitoring, data loss prevention, role-based/time-limited access and plans for zero-trust VPN replacement.
Bob Murphy of the Legislative Office of Information Technology Services briefed the Committee on Legislative Modernization on the office’s cybersecurity program and how it aligns with last year’s SB 291 requirements.
Murphy said the legislature’s data center is “located in the Capitol basement” with backups in a Kansas City, Missouri LightEdge facility and that all Microsoft 365 data “is all located within The United States.” He emphasized that only screened U.S. citizens work at the data centers and said the legislative environment is logically separated from commercial customers.
The nut graf: The Legislative Office described a mix of…
Already have an account? Log in
Subscribe to keep reading
Unlock the rest of this article — and every article on Citizen Portal.
- Unlimited articles
- AI-powered breakdowns of topics, speakers, decisions, and budgets
- Instant alerts when your location has a new meeting
- Follow topics and more locations
- 1,000 AI Insights / month, plus AI Chat

