Senate committee advances bill to screen government operational-technology for malware

The Senate Transportation, Public Utilities, Energy and Technology Standing Committee on Thursday voted to recommend third substitute House Bill 165 to the full Senate. The bill requires government entities and special districts to apply tools that detect malware and shield operational-technology components used in water, communications and electrical systems, and authorizes DTS funding to help smaller entities comply.

Representative Brooks, speaking for the bill, said the measure responds to recent concerns about foreign-made components embedded in infrastructure. “There’s malware on them, which means someone else can remotely access them and turn them on and turn them off,” Brooks said, citing risks that could include shutting off water or dumping chlorine into systems.

Tim Davis, executive director of the Department of Environmental Quality, told the committee HB165 complements House Bill 19, which directed protections for public water systems, saying the two bills are “hand in glove” to assist water systems as they secure drinking water.

Committee members asked whether the bill's focus on foreign adversaries excluded domestic threats and sought clarification about scope. Brooks said the bill covers domestic threats as well but that recent active threats prompted the current language.

Senator Ibsen moved that the committee favorably recommend the third substitute; the sponsor waived summation. The chair called the vote and the committee recorded a unanimous favorable recommendation. The bill will be scheduled for floor consideration.

The committee record did not include a floor vote outcome; action at this hearing was a committee recommendation only.