Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity Mfa topic
No spam. Unsubscribe anytime.
House State Affairs committee introduces RS 31885 to clarify state cybersecurity authority and require multi‑factor authentication
Summary
Representative Raybould asked the committee to introduce RS 31885 to clarify cybersecurity oversight and require multi‑factor authentication for accessing state information; committee introduced the RS after members were told existing infrastructure can support the change.
Representative Bridal Raybould introduced RS 31885, a request statute that clarifies which state entities have authority and oversight for cybersecurity and information security and that adopts multi‑factor authentication for accessing state information.
“For the record I am Representative Bridal Raybould from District 34,” Raybould told the committee. “The RS you have before you today accomplishes 2 objectives. It clarifies who has the authority and the oversight as it relates to cyber security and information security for the state of Idaho and also establishes that for the purposes of accessing state information, we adopt multi factor authentication, which is essentially the requirement that we use more than just a password to access information.”
Raybould told committee members that multi‑factor authentication reduces phishing opportunities and said the technology and process to provide that access are already in place for state employees. When Representative Barbieri raised a question about the fiscal note and asked what sources had been queried to determine there would be no financial impact, Raybould responded: “The process is already in place for state employees to gain access to LUMA. So essentially we already have the technology and the infrastructure in place to do it. This is just actually authorizing ITS to ensure that it's actually happening within the agencies at this point for other types of access to state information.”
Representative Mickelson moved to introduce RS 31885. After discussion and questions, the committee voted to introduce the RS; the motion carried by voice vote.
Why it matters: RS 31885 would clarify oversight responsibilities for cybersecurity within Idaho state government and formalize multi‑factor authentication as the required method for accessing state information, according to the sponsor. Committee discussion centered on fiscal impact and whether the needed technology was already deployed within state agencies; the sponsor said it was.
