Study; Joint Legislative Audit and Review Commission; Commonwealth's cybersecurity standards.

Directs the Joint Legislative Audit and Review Commission to (i) evaluate the Commonwealth's current policies, procedures, and standards for assessing cybersecurity risks and protecting the electronic information of all branches of state government from unauthorized uses, intrusions, and other security threats and (ii) make recommendations for the improvement of such policies, procedures, and standards, including a recommendation, within 180 days of commencing the study, as to whether either the General Assembly through legislation or the Governor through executive action should establish a centralized office or agency, other than the Virginia Information Technologies Agency, to have ongoing authority to establish, monitor, and update the Commonwealth's cybersecurity policies, procedures, and standards.