Title GV, Government Code

Sec. 2063.401. DESIGNATED INFORMATION SECURITY OFFICER. Each state agency shall designate an information security officer who: (1) reports to the agency's executive-level management; (2) has authority over information security for the entire agency; (3) possesses the training and…

Sec. 2063.402. CYBERSECURITY RISKS AND INCIDENTS. (a) The command shall develop a plan to address cybersecurity risks and incidents in this state. The command may enter into an agreement with a national organization, including the National Cybersecurity Preparedness Consortium, t…

Sec. 2063.403. INFORMATION SECURITY PLAN. (a) Each state agency shall develop, and periodically update, an information security plan for protecting the security of the agency's information. (b) In developing the plan, the state agency shall: (1) consider any vulnerability report …

Sec. 2063.404. ONGOING INFORMATION TRANSMISSIONS. Information received from state agencies by the department under Section 2054.069 shall be transmitted by the department to the command on an ongoing basis. Added by Acts 2025, 89th Leg., R.S., Ch. 331 (H.B. 150), Sec. 1, eff. Sep…

Sec. 2063.405. DATA SECURITY PLAN FOR ONLINE AND MOBILE APPLICATIONS. (a) Each state agency implementing an Internet website or mobile application that processes any sensitive personal or personally identifiable information or confidential information must: (1) submit a biennial …

Sec. 2063.406. CYBERSECURITY COUNCIL. (a) The chief or the chief's designee shall lead a cybersecurity council that includes public and private sector leaders and cybersecurity practitioners to collaborate on matters of cybersecurity concerning this state. (b) The cybersecurity c…

Sec. 2063.407. RECOMMENDATIONS. The chief may implement any portion, or all of the recommendations made by the cybersecurity council under Section 2063.406. Added by Acts 2013, 83rd Leg., R.S., Ch. 32 (S.B. 1102), Sec. 1, eff. May 10, 2013. Redesignated from Government Code, Sect…

Sec. 2063.408. CLOUD COMPUTING STATE RISK AND AUTHORIZATION MANAGEMENT PROGRAM. (a) In this section, "cloud computing service" has the meaning assigned by Section 2157.007. (b) The command shall establish a state risk and authorization management program to provide a standardized…

Sec. 2063.409. INFORMATION SECURITY ASSESSMENT AND PENETRATION TEST REQUIRED. (a) This section does not apply to a university system or institution of higher education as defined by Section 61.003, Education Code. (b) At least once every two years, the command shall require each …

Sec. 2063.501. DEFINITIONS. In this subchapter: (1) "Incident response team" means the Texas volunteer incident response team established under Section 2063.502. (2) "Participating entity" means a state agency, including an institution of higher education, or a local government t…

Sec. 2063.502. ESTABLISHMENT OF TEXAS VOLUNTEER INCIDENT RESPONSE TEAM. (a) The command shall establish the Texas volunteer incident response team to provide rapid response assistance to a participating entity under the command's direction during a cybersecurity incident. (b) The…

Sec. 2063.503. CONTRACT WITH VOLUNTEERS. The command shall enter into a contract with each volunteer the command approves to provide rapid response assistance under this subchapter. The contract must require the volunteer to: (1) acknowledge the confidentiality of information req…

Sec. 2063.504. VOLUNTEER QUALIFICATION. (a) The command shall require criminal history record information for each individual who accepts an invitation to become a volunteer. (b) The command may request other information relevant to the individual's qualification and fitness to s…

Sec. 2063.505. DEPLOYMENT. (a) In response to a cybersecurity incident that affects multiple participating entities or a declaration by the governor of a state of disaster caused by a cybersecurity event, the command on request of a participating entity may deploy volunteers and …

Sec. 2063.506. CYBERSECURITY COUNCIL DUTIES. The cybersecurity council established under Section 2063.406 shall review and make recommendations to the command regarding the policies and procedures used by the command to implement this subchapter. The command may consult with the …

Sec. 2063.507. COMMAND POWERS AND DUTIES. (a) The command shall: (1) approve the incident response tools the incident response team may use in responding to a cybersecurity incident; (2) establish the eligibility criteria an individual must meet to become a volunteer; (3) develop…

Sec. 2063.508. STATUS OF VOLUNTEER; LIABILITY. (a) A volunteer is not an agent, employee, or independent contractor of this state for any purpose and has no authority to obligate this state to a third party. (b) This state is not liable to a volunteer for personal injury or prope…

Sec. 2063.509. CIVIL LIABILITY. A volunteer who in good faith provides professional services in response to a cybersecurity incident is not liable for civil damages as a result of the volunteer's acts or omissions in providing the services, except for wilful and wanton misconduct…

Sec. 2063.510. CONFIDENTIAL INFORMATION. Information written, produced, collected, assembled, or maintained by the command, a participating entity, the cybersecurity council, or a volunteer in the implementation of this subchapter is confidential and not subject to disclosure und…

Sec. 2063.601. ELIGIBLE PARTICIPATING ENTITIES. A state agency or an entity listed in Section 2059.058 is eligible to participate in cybersecurity support and network security provided by a regional security operations center under this subchapter. Added by Acts 2021, 87th Leg., …

Sec. 2063.602. ESTABLISHMENT OF REGIONAL SECURITY OPERATIONS CENTERS. (a) Subject to Subsection (b), the command may establish regional security operations centers, under the command's managed security services framework established by Section 2063.204(c), to assist in providing …

Sec. 2063.603. REGIONAL SECURITY OPERATIONS CENTER LOCATIONS AND PHYSICAL SECURITY. (a) In creating and operating a regional security operations center, the command may partner with a university system or institution of higher education as defined by Section 61.003, Education Cod…

Sec. 2063.604. REGIONAL SECURITY OPERATIONS CENTERS SERVICES AND SUPPORT. The command may offer the following managed security services through a regional security operations center: (1) real-time cybersecurity monitoring to detect and respond to cybersecurity incidents that may …

Sec. 2063.605. NETWORK SECURITY GUIDELINES AND STANDARD OPERATING PROCEDURES. (a) The command shall adopt and provide to each regional security operations center appropriate network security guidelines and standard operating procedures to ensure efficient operation of the center …

Sec. 2101.001. DEFINITIONS. In this chapter: (1) "Enterprise resource planning" includes the administration of a state agency's: (A) general ledger; (B) accounts payable; (C) accounts receivable; (D) budgeting; (E) inventory; (F) asset management; (G) billing; (H) payroll; (I) pr…

Sec. 2101.011. FINANCIAL INFORMATION REQUIRED OF STATE AGENCIES. (a) In this section: (1) "Annual financial report" means the annual financial report required by this section. (2) "Appropriated money" means money appropriated by the legislature under the General Appropriations Ac…

Sec. 2101.0115. OTHER INFORMATION REQUIRED OF STATE AGENCIES. (a) A state agency shall submit an annual report to: (1) the governor; (2) the Legislative Reference Library; (3) the state auditor; and (4) the Legislative Budget Board. (b) A state agency's annual report must cover a…

Sec. 2101.012. UNIFORM ACCOUNTING AND REPORTING PROCEDURES. (a) The comptroller shall prescribe uniform accounting and financial reporting procedures that each state agency shall use in the preparation of the information requested under Section 2101.011. The procedures may includ…

Sec. 2101.013. REVIEW OF PROPOSED PROCEDURES. (a) Before adopting or changing the accounting and financial reporting procedures, the comptroller shall submit the proposed procedures to the state auditor for review and comment. (b) In adopting or changing procedures, the comptroll…

Sec. 2101.014. DUTIES OF STATE AUDITOR. The state auditor shall ensure that the accounting and financial reporting procedures of each state agency conform to the procedures adopted under this subchapter. Added by Acts 1993, 73rd Leg., ch. 268, Sec. 1, eff. Sept. 1, 1993.

Sec. 2101.015. COMPONENTIZATION FOR AGENCY RECEIVING FEDERAL FUNDS. (a) In this section "componentization" means the process of separately calculating the depreciation of major building structural components, subsystems, and equipment. (b) This section applies only to a state age…

Sec. 2101.031. UNIFORM STATEWIDE ACCOUNTING PROJECT. (a) The uniform statewide accounting project is in the comptroller's office. Text of introductory language of subsec. (b) as amended by Acts 1997, 75th Leg., ch. 891, Sec. 1.02 (b) The project includes each component of the uni…

Sec. 2101.033. PROJECT DIRECTOR. (a) The comptroller shall appoint a project director to administer the project. (b) The project director reports directly to the comptroller or chief deputy comptroller. (c) To be appointed project director, an individual must be qualified by trai…

Sec. 2101.034. PROJECT SUPPORT; RECOVERY OF COSTS. (a) The comptroller shall provide support services for the project, including accounting, purchasing, and personnel services. The cost of the services shall be paid from money appropriated to the comptroller. (b) The comptroller …

Sec. 2101.035. ADMINISTRATION OF USAS. (a) The comptroller is responsible for the administration, maintenance, and modification of the uniform statewide accounting system. The comptroller may adopt procedures and rules for the effective operation of the system, including procedur…

Sec. 2101.036. STATE AGENCY INTERNAL ACCOUNTING SYSTEMS. (a) The comptroller by rule may: (1) require state agencies to modify, delay, or stop the implementation of individual accounting and payroll systems, including individual enterprise resource planning systems, so that those…

Sec. 2101.037. STATE AGENCY COOPERATION. (a) A state agency shall make available to the project director all records of the agency for purposes of developing and implementing the project, including complying with the rules and requirements prescribed by the comptroller under Sect…

Sec. 2101.0375. WITHHOLDING OF TRAVEL EXPENSE REIMBURSEMENTS FOR LATE OR IMPROPER REPORTING. (a) The comptroller may withhold all reimbursements for the travel expenses incurred by the chief administrative officer of a state agency whose report under this subchapter is not proper…

Sec. 2101.0376. ADMINISTRATIVE PENALTIES FOR LATE OR IMPROPER REPORTING. (a) The comptroller may impose an administrative penalty against a state agency if the comptroller: (1) is late in submitting a statewide report or submits an incomplete statewide report; and (2) determines …

Sec. 2101.0377. REPORTING ACCOUNTING IRREGULARITIES TO STATE AUDITOR. On determining that a state agency, as defined by Section 658.001, or an institution of higher education, as defined by Section 61.003, Education Code, has inaccurately reported the expenditure of appropriated …

Sec. 2101.038. DUTIES OF STATE AUDITOR. The state auditor, when reviewing the operation of a state agency, shall audit for compliance with the uniform statewide accounting system, the comptroller's rules, and the Legislative Budget Board's performance and workload measures. The s…

Sec. 2101.039. CONTRACTS; EXEMPTION. Contracts made under this subchapter are not subject to: (1) Subtitle D, Title 10; (2) Chapter 2254; or (3) Chapter 2054. Added by Acts 1993, 73rd Leg., ch. 268, Sec. 1, eff. Sept. 1, 1993. Amended by Acts 1997, 75th Leg., ch. 165, Sec. 17.19(…

Sec. 2101.040. ENTERPRISE RESOURCE PLANNING ADVISORY COUNCIL. (a) The comptroller shall establish and coordinate the enterprise resource planning advisory council. The council is composed of: (1) representatives of the Department of Information Resources, appointed by the executi…

Sec. 2101.041. STATE AGENCY REPORTING OF CONTRACTING INFORMATION. (a) The comptroller by rule shall determine the contracting information that state agencies must report or provide using the centralized accounting and payroll system, or any successor system used to implement the …

Sec. 2101.042. LEAVE REPORTING. (a) As part of the centralized accounting and payroll system or any successor system used to implement the enterprise resource planning component of the uniform statewide accounting project developed under Sections 2101.031, 2101.035, and 2101.036,…

Sec. 2101.051. DEFINITION. In this subchapter, "economically targeted investment" means an investment in which at least 50 percent of the total investment is allocated to economic development within this state or investment in businesses or entities located within this state. Add…