INFORMATION TECHNOLOGY SERVICES – Amends and adds to existing law to require the implementation of cybersecurity best practices and the use of multifactor identification in Idaho state government.

This Idaho bill (H 4) requires all state agencies, the legislative branch, judicial branch, and elected constitutional officers to implement cybersecurity best practices and use two-step login verification (multifactor identification) for accessing government IT systems. It mandates that state employees must use at least two distinct verification methods - like a password plus a security token or biometric scan - to access email, cloud storage, databases, or networks. The law applies to all departments, institutions, and branches of state government, excluding the military division. It takes effect on July 1, 2025, and aims to strengthen data protection against cyber threats.