Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Oregon committee hears support for statewide incident notifications but small districts seek longer timelines
Summary
Witnesses backed HB 4055’s goal of centralized cybersecurity reporting but several special districts, cities and education service districts asked the Joint Committee on Information Management and Technology to extend the bill’s 48-hour reporting and staging of follow-up reports to give small, volunteer-run entities time to respond.
House Bill 4055, which would require local governments, special districts and other public bodies to notify the state chief information officer within 48 hours of discovering an information-security or ransomware incident, drew broad agreement on purpose but sharp questions about timelines during a Feb. 6 public hearing before the Joint Committee on Information Management and Technology.
Sean McSpadden, the committee administrator, told members the bill would direct the state CIO to create a secure reporting system, maintain a public website with reporting instructions and provide an annual summary to the legislature and governor. "The measure prescribes the information a public body is required to report and directs the state chief information officer to establish a reporting system," McSpadden said in opening remarks.
Why it matters: Committee…
Already have an account? Log in
Subscribe to keep reading
Unlock the rest of this article — and every article on Citizen Portal.
- Unlimited articles
- AI-powered breakdowns of topics, speakers, decisions, and budgets
- Instant alerts when your location has a new meeting
- Follow topics and more locations
- 1,000 AI Insights / month, plus AI Chat
