School districts: cybersecurity assessment.

Existing law establishes a system of public elementary and secondary schools in this state and authorizes school districts throughout the state to operate schools and provide instruction to pupils in kindergarten and grades 1 to 12, inclusive. Existing law requires the Office of Information Security, in consultation with the Office of Emergency Services, to require no fewer than 35 independent security assessments of state entities each year and determine basic standards of services to be performed as part of an independent security assessment. This bill would express the intent of the Legislature to enact subsequent legislation that would require every school district in the state to conduct an information technology cybersecurity assessment.