STAND. COM. REP. NO. 1620

Honolulu, Hawaii

RE: S.R. No. 75

S.D. 1

Honorable Ronald D. Kouchi

President of the Senate

Thirty-Second State Legislature

Regular Session of 2023

State of Hawaii

Sir:

Your Committees on Labor and Technology and Government Operations, to which was referred S.R. No. 75 entitled:

"SENATE RESOLUTION REQUESTING THAT THE CHIEF INFORMATION OFFICER ENSURE THAT ALL STATE DEPARTMENTS, AGENCIES, AND OFFICES OF THE STATE HAVE UP-TO-DATE TECHNOLOGY TO REDUCE CYBER THREATS AND HELP PROTECT THE STATE AGAINST CYBERATTACKS,"

beg leave to report as follows:

The purpose and intent of this measure is to request that the Chief Information Officer ensure that all state departments, agencies, and offices of the State have up-to-date technology to reduce cyber threats and help protect the State against cyberattacks.

Your Committee received testimony in support of this measure from the Judiciary.

Your Committees find that the frequency, scale, and sophistication of cyberattacks against key infrastructure and government systems have been on the rise and that the devastating effects of these cyberattacks can range from financial loss, skewed election results, theft and destruction of data, blackouts, and other forms of service disruptions. Your Committees recognize that up-to-date technology can help protect the State from cyber threats against key day-to-day operations of the institutions and infrastructure of the State. According to testimony from the Office of Enterprise Technology Services, an amendment requesting the Chief Information Officer to review the status of departmental technology instead of ensuring that the technology is up-to-date would align this measure with the Chief Information Officer's statutory responsibility regarding cybersecurity pursuant to section 27-43.5, Hawaii Revised Statutes.

Accordingly, your Committees have amended this measure by:

(1) Amending language to request that the Chief Information Officer review whether all departments, agencies, and offices of the State have up-to-date technology to reduce cyber threats in accordance with the statutory responsibility of the Office of Enterprise Technology Services;

(2) Amending its title to reflect its amended purpose; and

(3) Making technical, nonsubstantive amendments for the purposes of clarity and consistency.

As affirmed by the records of votes of the members of your Committees on Labor and Technology and Government Operations that are attached to this report, your Committees concur with the intent and purpose of S.R. No. 75, as amended herein, and recommend its adoption in the form attached hereto as S.R. No. 75, S.D. 1.

Respectfully submitted on behalf of the members of the Committees on Labor and Technology and Government Operations,

________________________________ ANGUS L.K. MCKELVEY, Chair

________________________________ SHARON MORIWAKI, Chair