AN ACT relating to governmental administration; creating and setting forth the duties of the Security Operations Center within the Office of the Chief Information Officer within the Office of the Governor; creating the Account for the Security Operations Center and prescribing the use of money in the Account; requiring the Security Operations Center to prepare an annual report that assesses the effectiveness of the Security Operations Center; establishing the Cybersecurity Talent Pipeline Program; revising the purpose of the Office; authorizing the board of trustees of a school district to use the services and equipment of the Office; making various other changes relating to the cybersecurity of governmental entities; and providing other matters properly relating thereto.
Sponsored By: Toby Yurek (Republican)
Failed
Personalized for You
How does this bill affect your finances?
Personalize government policy and PRIA will tell you what this bill means for your household, plus every other piece of legislation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Bill Overview
Analyzed Economic Effects
10 provisions identified: 4 benefits, 2 costs, 4 mixed.
Nevada students gain cybersecurity work experience
As funding allows, the Security Operations Center must develop the Cybersecurity Talent Pipeline Program with Nevada’s higher education system. The program provides career-development opportunities in computer science or cybersecurity. It must offer Center work experience to Nevada System of Higher Education students majoring in cybersecurity-related fields. The law states no wage, stipend, or funding amount.
Nevada creates dedicated cybersecurity funding account
The law creates a Chief-managed State General Fund account used only for the Security Operations Center’s duties. Unspent money carries forward, and interest stays in the account; no specific funding amount is stated. The Chief can accept federal grants, and the Center can pool cybersecurity grants, manage them, and set fair shared-resource access criteria. The Center must prepare an annual effectiveness report by January 1 covering progress, threats, attacks, responses, goals, and challenges. By July 1 each year, it must send the report to the Governor, Attorney General, and Legislative Counsel Bureau Director for delivery to the Legislature.
School districts can arrange cybersecurity services
School district boards join the local governments eligible to use the Office’s services and equipment. Listed Nevada agencies, the Nevada System of Higher Education, and local governments can negotiate for mutually agreed services or equipment. The Office provides services and technical advice without taking administrative control of agency systems. The Security Operations Center cannot take operational control of agency equipment or software. Before services begin, the Center must provide security standards and policies, and the agency must accept them in writing.
Tribal agreements protect control and data
The law leaves existing agreements with federally recognized Indian tribes intact. Covered agreements between governments involving tribal governing bodies, groups, or specified tribal organizations must respect tribal self-government. They must also include data rules that both sides agree to.
Agencies need approval to leave services
State agencies and elected state officers must apply to the Chief and explain their reasons before substantially leaving Office services. After a denial, they need approval by legislative concurrent resolution during a session or by the Interim Finance Committee between sessions. An application the Committee does not consider within 45 days after submission is deemed approved. Local governments with service agreements must also seek the Chief’s approval and explain their reasons before substantially withdrawing.
Participating agencies pay full service costs
Participating agencies must budget for fees covering the Office’s full service and equipment costs, including overhead. The Chief sets fees, including each agency’s share of network and cybersecurity operating and maintenance costs, including depreciation. Fees also include monthly installments for computer-facility construction costs, divided according to services used. Agencies receive monthly itemized bills; the Chief can allow fixed-cost billing that includes depreciation when warranted. Revenues and equipment-sale proceeds go through the State Treasurer into the internal-service Fund for Information Services. No fee amount is set, and households are not charged directly.
Agencies must report cyberattacks within 24 hours
Participating agencies must report specified suspected incidents within 24 hours after discovery to Information Security and the Security Operations Center. Reports cover data breaches, ransomware, attacks that flood systems, and security noncompliance identified by the Office. They also cover service disruptions lasting more than 1 business day or directly affecting life or property. Reports must describe the incident, its impact, notifications, and needed resources. The Information Security Chief must consult the Center and investigate and resolve breaches or unauthorized data access that materially compromise system security, confidentiality, or integrity.
Government agencies face shared cybersecurity rules
The Chief must set rules for participating agencies’ systems, services, security, and programming; agencies must follow the Office’s standards. The Security Operations Center develops policies for threats, sensitive data, attack response, staff development, and automated security tools. Its policies cover agency threat reports and notifications to law enforcement, public safety officials, and other appropriate groups. The Center works with the Nevada Office of Cyber Defense Coordination and shares emerging threats and security advice with agencies. The Chief can require extra oversight or audits when agencies do not follow the Center’s cybersecurity policies and protocols.
Nevada agencies get shared cybersecurity services
The law creates a Security Operations Center within the Governor’s Office of the Chief Information Officer. State agencies and elected state officers must use its services and equipment, except agencies exempt under NRS 242.131(2). Services include real-time monitoring, threat reduction, attack response, and cybersecurity enforcement. The Office handles application design and launch, including applications supplied by agreement, and continuously monitors and tests agency systems. Testing includes simulated break-ins; when demand exceeds capacity, the Office can hire outside providers and must manage those contracts.
Some government cybersecurity records stay private
Certain records held or prepared by the Office are confidential and closed to public inspection. They must contain specified system-security information, vulnerability assessments, or security-test results. The Chief must determine that disclosure creates a substantial likelihood of threatening agency cybersecurity or public safety. The rule protects sensitive security information but limits public access to qualifying records, not all government records.
Sponsors & Cosponsors
Sponsor
Toby Yurek
Republican • House
Cosponsors
There are no cosponsors for this bill.
Roll Call Votes
No roll call votes available for this bill.
Actions Timeline
(No further action taken.)
6/3/2025HouseTo committee.
4/24/2025HouseFrom printer. To engrossment. Engrossed. First reprint.
4/24/2025HouseTo printer.
4/21/2025HouseRereferred to Committee on Ways and Means. Exemption effective.
4/21/2025HouseTaken from General File.
4/21/2025HouseRead second time. Amended. (Amend. No. 281.)
4/21/2025HousePlaced on Second Reading File.
4/21/2025HouseFrom committee: Amend, and do pass as amended.
4/21/2025HouseNotice of eligibility for exemption.
3/27/2025HouseFrom printer. To committee.
3/17/2025HouseRead first time. Referred to Committee on Government Affairs. To printer.
3/13/2025House
Bill Text
As Introduced
Reprint 1
Related Bills
AB397, AN ACT relating to higher education; revising provisions governing certain waivers of fees provided by the Board of Regents of the University of Nevada; revising the criteria of eligibility for a waiver of fees by the Board of Regents for certain persons who are or were unaccompanied for a certain period of time; revising the criteria of eligibility for a waiver of fees by the Board of Regents for certain Native American students; providing for the continuity of waivers previously provided for certain Native American students; repealing certain provisions requiring the Chancellor of the Nevada System of Higher Education to cause to be analyzed certain natural materials upon the request of a resident of this State; and providing other matters properly relating thereto.
AB259, AN ACT relating to health care; prohibiting certain actions related to pricing and reimbursement for certain drugs; creating a cause of action for violating such prohibitions; and providing other matters properly relating thereto.
AB188, AN ACT relating to the Public Employees' Benefits Program; requiring the Board of the Public Employees' Benefits Program to report certain information relating to the costs of health insurance for certain retirees; revising provisions relating to the subsidy paid for certain health and welfare benefits for certain state employees who have retired with state service; revising requirements for certain retired public officers and employees to reinstate insurance under the Program; revising provisions relating to certain subsidies paid to the Program for the 2025-2027 biennium; requiring the Joint Interim Standing Committee on Government Affairs to conduct an interim study on the Program; making an appropriation; and providing other matters properly relating thereto.
SB217, AN ACT relating to health care; prohibiting a governmental entity from substantially burdening certain activity relating to assisted reproduction under certain circumstances; authorizing a person whose engagement in such activity has been so burdened to assert the violation as a claim or defense in a judicial proceeding; authorizing a court to award damages against a governmental entity that substantially burdens such activity in certain circumstances; providing certain immunity from civil and criminal liability and administrative sanctions for certain persons and entities involved in the provision of assisted reproduction; providing that a fertilized egg or human embryo that exists before implantation in a human uterus is not a person for legal purposes; requiring certain health insurers to authorize a pregnant person to enroll in a health plan during a specified period; requiring certain public and private health insurers to provide certain coverage for the treatment of infertility and fertility preservation; providing a penalty; and providing other matters properly relating thereto.
AB499, AN ACT relating to elections; requiring, with certain exceptions, a registered voter show photo identification to vote in person; requiring the Department of Motor Vehicles, under certain circumstances, to issue identification cards at no charge; requiring the Secretary of State to issue digital identification cards; requiring a county clerk in certain counties to establish a certain number of locations for a voter to return his or her mail ballot to a mail ballot drop box during the period between the last day for early voting and the day before the date of the general election; authorizing a county clerk in certain counties to establish such locations; authorizing a person, under certain circumstances, to return a mail ballot to a mail ballot drop box established at such a location on behalf of a voter; requiring the Secretary of State to establish and maintain a voter services portal on the Internet website of the Office of the Secretary of State; requiring the county clerk to include certain information relating to the voter services portal on any communication to a registered voter; requiring the Department of Motor Vehicles to submit electronically to the Secretary of State certain information relating to each person who has a driver's license or identification card issued by the Department; requiring the Secretary of State to include certain information received from the Department in the centralized, top-down database that is established by the Secretary of State for purposes of creating the statewide voter registration list; requiring certain information to be included on the return envelope for a mail ballot; revising provisions relating to curing mail ballots; requiring mail ballot drop boxes to be monitored and secured; providing that certain information on the statewide voter registration list relating to a voter is confidential and not a public record; making various other changes relating to elections; making appropriations; and providing other matters properly relating thereto.
AB409, AN ACT relating to motor vehicles; requiring the Department of Motor Vehicles, under certain circumstances, to issue a special license plate honoring certain veterans; authorizing the combination of personalized prestige license plates and certain special license plates associated with military service; and providing other matters properly relating thereto.