A BILL TO BE ENTITLED
AN ACT to make it a class f felony to willfully or maliciously destroy, injure, or otherwise damage a public infrastructure or public transportation system; to establish the cyber security fund within the state treasury to be administered by the department of information tECHNOLOGY with input from critical government stakeholders for the purpose of upgrading their information technology infrastructure to strengthen the state and localities against cyberattacks and appropriating funds for that purpose; and to ESTABLISH THE UTILITY SECURITIZATION TRUST FUND WITHIN THE STATE TREASURY TO STRENGTHEN PUBLIC UTILITY COMPANIES, the STATE, AND LOCALITIES AGAINST ATTACKS ON UTILITY INFRASTRUCTURE AND APPROPRIATING FUNDS FOR THAT PURPOSE.
The General Assembly of North Carolina enacts:

part i. establish attack on public infrastructure offense
SECTION 1.(a)  Article 22 of Chapter 14 of the General Statutes is amended by adding a new section to read:
"§ 14‑150.2.  Attack on public infrastructure.
(a)	Definitions. – The following definitions apply in this Article:
(1)	Public infrastructure. – Publicly or privately owned facilities, systems, functions, or assets, whether physical or virtual, providing or distributing services for the benefit of the public, including energy, fuel, water, agriculture, health care, finance, or communication.
(2)	Public transportation system. – All facilities, conveyances, and instrumentalities, whether publicly or privately owned, that are used in or for publicly available services for the transportation of individuals or cargo.
(b)	Offense. – It is unlawful to willfully or maliciously destroy, injure, or otherwise damage, or attempt to destroy, injure, or otherwise damage, a public infrastructure or public transportation system.
(c)	Punishment. – Unless the conduct is covered under some other provision of law providing greater punishment, a person who violates subsection (b) of this section is guilty of a Class F felony.
(d)	Civil Liability. – Any person whose property or person is injured by reason of a violation of this section may sue for and recover treble damages, costs, and attorneys' fees from the person who committed the violation of this section and any person who acts as an accessory before or after the fact, aids or abets, solicits, conspires, or lends material support to the violation of this section. The rights and remedies provided by this subsection are in addition to any other rights and remedies provided by law. For purposes of this subsection, the term "damages" includes actual and consequential damages."
SECTION 1.(b)  This section becomes effective December 1, 2023, and applies to offenses committed on or after that date.

part ii. establish cyber security fund
SECTION 2.(a)  Article 9 of Chapter 143C of the General Statutes is amended by adding a new section to read:
"§ 143C‑9‑10.  Cyber Security Fund.
(a)	Fund Established. – The Cyber Security Fund is established as a nonreverting, interest‑bearing special fund in the Office of the Treasurer. The Department of Information Technology shall administer expenditures and manage the program of grants awarded by the North Carolina Cybersecurity Commission created in subsection (d) of this section, with substantial input from the following entities:
(1)	Department of Public Safety.
(2)	State Bureau of Investigation.
(3)	Counties, cities, and other local political subdivisions of the State.
The Cyber Security Fund shall consist of appropriations from the General Fund, federal funds granted to the State to protect the State's cybersecurity infrastructure, and funds from local political subdivisions appropriated directly to the Fund for cybersecurity programs. Other public agencies and private sources may donate funds for cybersecurity programs supported by the Cyber Security Fund. Only unconditional and unrestricted donations shall be accepted. Contributed funds shall be allocated only as specifically provided in the Current Operations Appropriations Act.
(b)	Role of State Treasurer. – The State Treasurer shall be the custodian of the Cyber Security Fund and shall invest its assets in accordance with G.S. 147‑69.2 and G.S. 147‑69.3. Investment earnings credited to the assets of the Cyber Security Fund shall become part of the Fund. The State Treasurer shall hold the Fund separate and apart from all other moneys, funds, and accounts. Any balance remaining at the end of any fiscal year shall be carried forward in the Cyber Security Fund for the next succeeding fiscal year.
(c)	Uses of the Fund. – Funds from the Cyber Security Fund shall be allocated to State and local governmental agencies to be used only as follows:
(1)	To make targeted cybersecurity investments to upgrade information technology infrastructure and improve the resilience of State and local government agencies.
(2)	To help State and local government agencies address cybersecurity risks and threats to government information systems by developing, implementing, and revising cybersecurity plans and improving coordinated capabilities to respond to cybersecurity incidents.
(3)	To ensure organizational personnel are appropriately trained to provide robust responses to cyber threats and incidents.
(d)	There is created the North Carolina Cybersecurity Commission (Commission) to make awards from the Cyber Security Fund. The Commission shall consist of one representative from each of the following entities: (i) the Department of Information Technology, (ii) the Division of Emergency Management in the Department of Public Safety, (iii) the North Carolina National Guard, and (iv) the North Carolina Local Government Information Systems Association. The Commission shall have the following powers and duties:
(1)	To develop standards and best practices for State cybersecurity. 
(2)	To award funding to projects proposed by State and local government entities on a competitive basis.
(3)	To use its standards and best practices to evaluate whether projects are responsible.
(4)	To develop a cybersecurity strategy to make North Carolina State and local governments secure.
(5)	To review the cybersecurity strategy annually and make adjustments as necessary as the cybersecurity landscape develops.
(6)	To advise State and local officials on cybersecurity and provide consultation during cyberattack events."
SECTION 2.(b)  G.S. 143B‑1322(c) is amended by adding a new subdivision to read:
"(23)	Administer the Cyber Security Fund, as provided by G.S. 143C‑9‑10."
SECTION 2.(c)  Unless prohibited by federal law, federal funds provided during the 2023‑2025 fiscal biennium to the State to implement the State and Local Cybersecurity Grant Program (SLCGP) as enacted in the Infrastructure Investment and Jobs Act of 2021, Public Law 117‑58, shall be credited to the Cyber Security Fund. Allocation of SLCGP funds from the Cyber Security Fund may be made only upon appropriation by an act of the General Assembly, unless otherwise specifically authorized by federal law.
SECTION 2.(d)  Effective July 1, 2023, there is appropriated from the General Fund to the Cyber Security Fund the sum of twenty‑five million dollars ($25,000,000) for the 2023‑2024 fiscal year and the sum of twenty‑five million dollars ($25,000,000) for the 2024‑2025 fiscal year to fund State and local government cybersecurity efforts to strengthen government information technology infrastructure against the risk of cyberattacks.

part iii. utility securitization trust fund
SECTION 3.(a)  Article 9 of Chapter 143C of the General Statutes is amended by adding a new section to read:
"§ 143C‑9‑11.  Utility Securitization Trust Fund.
(a)	Fund Established. – The Utility Securitization Trust Fund is established as a nonreverting, interest‑bearing special fund in the Office of the Treasurer. The Department of State Treasurer shall administer expenditures and manage the programs supported from the Utility Securitization Trust Fund with substantial input from the following entities:
(1)	Department of Public Safety.
(2)	State Bureau of Investigation.
(3)	Counties, cities, and other local political subdivisions of the State.
(4)	Public Utilities Commission.
The Utility Securitization Trust Fund shall consist of appropriations from the General Fund, federal funds granted to the State to protect the State's public utility infrastructure, and funds from local political subdivisions appropriated directly to the Fund for public utility securitization programs. Other public agencies and private sources may donate funds for public utility securitization programs supported by the Utility Securitization Trust Fund. Only unconditional and unrestricted donations shall be accepted. Contributed funds shall be allocated only as specifically provided in the Current Operations Appropriations Act.
(b)	Role of State Treasurer. – The State Treasurer shall be the custodian of the Utility Securitization Trust Fund and shall invest its assets in accordance with G.S. 147‑69.2 and G.S. 147‑69.3. Investment earnings credited to the assets of the Utility Securitization Trust Fund shall become part of the Fund. The State Treasurer shall hold the Fund separate and apart from all other moneys, funds, and accounts. Any balance remaining at the end of any fiscal year shall be carried forward in the Utility Securitization Trust Fund for the next succeeding fiscal year.
(c)	Uses of the Fund. – Funds from the Utility Securitization Trust Fund shall be allocated to public utilities, as defined in G.S. 62‑3, and State and local governmental agencies to be used only as follows:
(1)	To make targeted public utility infrastructure investments to upgrade and harden the security of public utility infrastructure and improve the resilience of public utilities and State and local government agencies.
(2)	To help public utilities and State and local government agencies address public utility infrastructure risks and threats to public utility infrastructure by developing, implementing, and revising security plans and improving coordinated capabilities to respond to security incidents.
(3)	To ensure organizational personnel are appropriately trained to provide robust responses to security threats and incidents."
SECTION 3.(b)  Effective July 1, 2023, there is appropriated from the General Fund to the Utility Securitization Trust Fund the sum of twenty‑five million dollars ($25,000,000) for the 2023‑2024 fiscal year and the sum of twenty‑five million dollars ($25,000,000) for the 2024‑2025 fiscal year to fund public utilities and State and local government efforts to strengthen public utility infrastructure against the risk of security threats and incidents.

part iv. effective date
SECTION 4.  Except as otherwise provided, this act is effective when it becomes law.