A BILL TO BE ENTITLED
AN ACT providing for the evaluation of the state's information technology security policy and standards.
The General Assembly of North Carolina enacts:
SECTION 1.  G.S. 147‑33.82 is amended by adding a new subsection to read:
"(e1)	The State Chief Information Officer shall assess the ability of each agency to comply with the current security enterprise-wide set of standards established pursuant to this section. The assessment shall include, at a minimum, the rate of compliance with the standards in each agency and an assessment of each agency's security organization, network security architecture, and current expenditures for information technology security. The assessment shall also estimate the cost to implement the security measures needed for agencies to fully comply with the standards. Each agency subject to the standards shall submit information required by the State Chief Information Officer for purposes of this assessment. Not later than May 4, 2004, the Information Resources Management Commission and the State Chief Information Officer shall submit a public report that summarizes the status of the assessment, including the available estimates of additional funding needed to bring agencies into compliance, to the Joint Legislative Commission on Governmental Operations, and shall provide updated assessment information by January 15 of each subsequent year."
SECTION 2.  This act is effective when it becomes law.