Independent information security assessments: Military Department: local educational agencies.

Existing law charges the chief of the Office of Information Security with establishment of an information security program implemented by state entities, and authorizes the office to conduct an independent security assessment of every state agency, department, or office. Existing law also authorizes the Military Department to perform an independent security assessment of any state agency, department, or office, the cost of which is required to be funded by that state agency, department, or office. Existing law requires the Office of Emergency Services to establish and lead the California Cybersecurity Integration Center which serves as the central organizing hub of state government's cybersecurity activities and coordinates information sharing with agencies, service providers, and other organizations. This bill would authorize the Military Department, at the request of a local educational agency, and in consultation with the California Cybersecurity Integration Center, to perform an independent security assessment of the local educational agency, or an individual schoolsite under its jurisdiction, the cost of which to be funded by the local educational agency, as specified. Existing constitutional provisions require that a statute that limits the right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings demonstrating the interest protected by the limitation and the need for protecting that interest. This bill would make legislative findings to that effect.