Committee introduces measure to clarify cybersecurity oversight, require multi‑factor authentication for state access

The Idaho House State Affairs Committee introduced RS31885 on Jan. 9, a proposal sponsored by Rep. Britt Raybould to clarify which offices have authority over state cybersecurity and to adopt multi‑factor authentication for accessing state information. The motion to introduce the request for study passed by voice vote.

Representative Britt Raybould, R‑District 34, told the committee the draft “accomplishes two objectives: it clarifies who has the authority and the oversight as it relates to cyber security and information security for the State of Idaho and also establishes that for the purposes of accessing State information we adopt multi factor authentication, which is essentially the requirement that we use more than just a password to access information. It's a way to help reduce phishing opportunities for those who attempt to gain access to our state systems.”

Rep. Barbieri raised a question about the fiscal note and asked what sources had been consulted to determine the measure would have no financial impact. Raybould replied that the process and technology for state employees to gain access already exist, saying, “the process is already in place for State employees to gain access to LUMA, so essentially we already have the technology and the infrastructure in place to do it. This is just authorizing ITS to ensure that it's actually happening within the agencies.”

Representative Mickelson made the motion to introduce RS31885; the committee carried the motion by voice vote. The measure was introduced for further consideration under the committee's process.

No formal vote tally was recorded in the transcript; committee action recorded in the meeting was the voice approval to introduce the RS request.