Title 19

NRS 242.045 “Division” defined. Repealed. (See chapter 294, Statutes of Nevada 2025, at page 1970.)

NRS 242.051 “Equipment” defined. “Equipment” means any machine or device designed for the electronic handling of data or information, including, without limitation, for the acquisition, storage, processing, management, use, maintenance, display, distribution, disposal, transmissi…

NRS 242.055 “Information service” defined. “Information service” means any service provided by the Office to a using agency relating to the creation, maintenance, operation, security validation, testing, continuous monitoring or use of an information system. The term includes, wi…

NRS 242.057 “Information system” defined. “Information system” means any communications or computer equipment, software, firmware, procedures, personnel or technology used to acquire, store, process, manage, use, maintain, display, distribute, dispose of, transmit or retrieve dat…

NRS 242.059 “Information technology” defined. “Information technology” means any information, information system or information service acquired, developed, operated, maintained or otherwise used. (Added to NRS by 1993, 1539; A 2011, 1859)

NRS 242.061 “Local governmental agency” defined. “Local governmental agency” means: 1. Any branch, agency, bureau, board, commission, department or division of a county, incorporated city or town in this State; or 2. The board of trustees of a school district. (Added to NRS by 20…

NRS 242.062 “Office” defined. “Office” means the Governor’s Technology Office within the Office of the Governor. (Added to NRS by 2023, 3558; A 2025, 1957)

NRS 242.063 “Security validation” defined. “Security validation” means a process or processes used to ensure that an information system or a network associated with an information system is resistant to any known threat. (Added to NRS by 2011, 1858)

NRS 242.068 “Using agency” defined. “Using agency” means: 1. A state agency or elected state officer who is required to use the services and equipment of the Office pursuant to subsection 1 of NRS 242.131. 2. Any other state agency or local governmental agency that has negotiated…

NRS 242.071 Legislative declaration; purposes of Governor’s Technology Office. 1. The Legislature hereby determines and declares that the creation of the Governor’s Technology Office within the Office of the Governor is necessary for the secure, coordinated, orderly and economica…

NRS 242.080 Creation; composition. 1. The Governor’s Technology Office is hereby created within the Office of the Governor. 2. The Office consists of the Chief Information Officer and: (a) The Director’s Office. The Chief is the head of the Director’s Office. (b) The Client Servi…

NRS 242.090 Chief Information Officer: Appointment; classification; other employment prohibited. 1. The Governor shall appoint the Chief Information Officer in the unclassified service of the State. 2. The Chief Information Officer: (a) Serves at the pleasure of, and is responsib…

NRS 242.101 Chief Information Officer: General powers and duties. 1. The Chief Information Officer shall: (a) Appoint a Deputy Director of the Office of Information Security and Cyber Defense who is in the unclassified service of the State; (b) Administer the provisions of this c…

NRS 242.105 Confidentiality of certain documents relating to homeland security: List; biennial review; annual report. 1. Except as otherwise provided in subsection 3, records and portions of records that are assembled, maintained, overseen or prepared by the Office to mitigate, p…

NRS 242.111 Regulations. The Chief shall adopt regulations necessary for the administration of this chapter, including: 1. The policy for the information systems of using agencies, as that policy relates, but is not limited, to such items as standards for systems and programming …

NRS 242.115 Development of policies, standards, guidelines and biennial state plan for information systems of Executive Branch of Government. 1. Except as otherwise provided in subsection 2, the Chief shall: (a) Develop policies and standards for the information systems of the Ex…

NRS 242.116 Security Operations Center: Development of certain policies and procedures. 1. The Security Operations Center shall develop policies and procedures to: (a) Combat the increasing threats to using agencies posed by cybercriminals; (b) Protect sensitive data in the posse…

NRS 242.1165 Oversight by Chief of certain using agencies. If a using agency does not comply with the cybersecurity policies and protocols developed by the Security Operations Center pursuant to NRS 242.116, the Chief may impose additional oversight or audit requirements on the u…

NRS 242.117 Account for the Security Operations Center: Creation; administration; use; grants; interest. 1. The Account for the Security Operations Center is hereby created in the State General Fund. The Chief must administer the Account. 2. The money in the Account must only be …

NRS 242.118 Security Operations Center: Duty to collaborate with Office of Information Security and Cyber Defense for certain purposes. The Security Operations Center shall collaborate with the Office of Information Security and Cyber Defense created by NRS 242.080 to enhance com…

NRS 242.119 Security Operations Center: Report assessing effectiveness. 1. On or before January 1 of each year, the Security Operations Center shall prepare a report assessing the effectiveness of the Security Operations Center relating to its duties. The report must include, wit…

NRS 242.122 Information Technology Advisory Board: Creation; members; Chair. 1. There is hereby created an Information Technology Advisory Board. The Board consists of: (a) One member appointed by the Majority Floor Leader of the Senate from the membership of the Senate Standing …

NRS 242.123 Information Technology Advisory Board: Meetings; compensation. 1. The Board shall meet at least once every 3 months and may meet at such further times as deemed necessary by the Chair. 2. Members of the Board who are officers or employees of the Executive Department o…

NRS 242.124 Information Technology Advisory Board: Duties; powers. 1. The Board shall: (a) Advise the Office concerning issues relating to information technology, including, without limitation, the development, acquisition, consolidation and integration of, and policies, planning…

NRS 242.125 Consultation and coordination with state agencies not required to use services or equipment of Office. Regulations, policies, standards and guidelines adopted pursuant to the provisions of this chapter must be developed after consultation and coordination with state a…

NRS 242.127 Definitions. As used in NRS 242.127 to 242.129, inclusive, unless the context otherwise requires, the words and terms defined in NRS 242.1273, 242.1275 and 242.1277 have the meanings ascribed to them in those sections. (Added to NRS by 2025, 3560)

NRS 242.1273 “Deputy Director” defined. “Deputy Director” means the Deputy Director of the Office of Information Security and Cyber Defense appointed by the Chief pursuant to NRS 242.101. (Added to NRS by 2025, 3560)

NRS 242.1275 “Security of an information system” defined. “Security of an information system” includes, without limitation, the security of: 1. The physical infrastructure of an information system; and 2. Information, including, without limitation, personal information, that is s…

NRS 242.1277 “State agency” defined. “State agency” means every public agency, bureau, board, commission, department or division of the Executive Branch of the State Government. (Added to NRS by 2025, 3560)

NRS 242.1279 Legislative declaration. The Legislature hereby finds and declares that: 1. The protection and security of information systems, and the coordination of efforts to promote the protection and security of information systems, are essential to protecting the health, safe…

NRS 242.128 Duties. The Office of Information Security and Cyber Defense shall: 1. Develop procedures for risk-based assessments that identify vulnerabilities in the information systems that are operated or maintained by state agencies and any potential threats that may exploit s…

NRS 242.1281 Establishment of certain partnerships; consultation and coordination with certain state agencies. The Office of Information Security and Cyber Defense shall: 1. Establish partnerships with: (a) Local governments; (b) The Nevada System of Higher Education; and (c) Pri…

NRS 242.1283 Establishment of certain policies and procedures for notification of specific threats; appointment of cybersecurity incident response teams; duties. 1. The Office of Information Security and Cyber Defense shall establish policies and procedures for: (a) A state agenc…

NRS 242.1285 Statewide strategic plan: Requirements; biannual updates; use by private entity; testing of adherence to cybersecurity policy. 1. The Office of Information Security and Cyber Defense shall prepare and make publicly available a statewide strategic plan that outlines p…

NRS 242.1287 Submission of quarterly reports to Governor; submission of annual reports to Governor and Nevada Commission on Homeland Security. 1. The Office of Information Security and Cyber Defense shall quarterly prepare and submit to the Governor a report assessing the prepare…

NRS 242.1289 Adoption of cybersecurity incident response plan; requirements for regulations; review of plans; confidentiality of plans. 1. Each political subdivision shall adopt and maintain a cybersecurity incident response plan. Each new or revised plan must be filed within 10 …

NRS 242.129 Confidentiality of certain records. 1. Any record of a state agency, including, without limitation, a record of the Office of Information Security and Cyber Defense or local government or a record obtained from a private entity which identifies the detection or invest…

NRS 242.131 Services provided for agencies and elected officers of State: Negotiation; withdrawal; contracts to provide services. 1. The Office shall provide state agencies and elected state officers with all their required design of information systems. The Security Operations C…

NRS 242.135 Employment of one or more persons to provide information services for agency or elected officer of State. 1. The Chief may recommend to the Governor that a state agency or elected officer that is required to use the Office’s equipment or services be authorized to empl…

NRS 242.141 Services provided for agencies not under Governor’s control and local governmental agencies. Repealed. (See chapter 4, Statutes of Nevada 2025, 36th Special Session, at page 48.)

NRS 242.151 Chief to advise agencies. The Chief shall advise the using agencies regarding: 1. The policy for information services of the Office, as that policy relates, but is not limited, to such items as standards for systems and programming and criteria for the selection, loca…

NRS 242.161 Control of equipment owned or leased by using agency; agreement on standards and policies for equipment or software systems deployed by Security Operations Center. 1. All equipment of a using agency which is owned or leased by the State must be under the managerial co…

NRS 242.171 Responsibilities of Office; review of proposed applications of information systems. 1. The Office is responsible for: (a) The applications of information systems; (b) Designing and placing those information systems in operation; (c) Any application of an information s…

NRS 242.181 Adherence by using agencies to regulations; reporting of certain incidents; authority to establish uniform reporting system; uniformity of services. 1. Any using agency which uses the equipment or services of the Office shall adhere to the regulations, standards, prac…

NRS 242.183 Investigation, resolution and notification of certain breaches or applications of information systems or certain unauthorized acquisitions of computerized data; certain information technology personnel to report to Chief under certain circumstances. 1. The Deputy Dire…