State agencies: information security: Zero Trust architecture.
Vote required
Majority
Fiscal committee
No
Appropriation
No
Current location
Appropriations
Take action
Record your position on this measure.
Create an account to take a stance, submit a written position, or contact your legislator.
Progress
Where this bill stands in the legislative process.
- Introduced
- Passed Assembly
- Passed Senate
- To Governor
- Became Law
Overview
This bill requires California state agencies to adopt and implement a Zero Trust security architecture across their systems and data. Agencies must achieve specific maturity levels as defined by the Cybersecurity and Infrastructure Security Agency (CISA) Maturity Model by certain dates, prioritizing solutions aligned with federal guidelines and incorporating measures like multifactor authentication and robust logging. The bill also mandates updated reporting requirements to track progress toward these goals and ensure compliance with federal funding conditions.
Key provisions
- Requires all state agencies to implement Zero Trust architecture.
- Sets maturity levels for Zero Trust implementation (Advanced by 2026, Optimal by 2030).
- Prioritizes compliance with federal guidelines and frameworks.
- Mandates the use of multifactor authentication and enterprise endpoint detection and response solutions.
- Requires robust logging practices.
- Updates annual reporting requirements to track Zero Trust progress.
- Allows for flexibility for the University of California.
- Ensures implementation aligns with federal funding requirements.
Who is affected
- State Agencies
- California Residents (indirectly, through improved cybersecurity)
- Department of Technology
- Office of Information Security
Notable changes
Bill text
Read the latest version inline or switch to a previous version.
Text extraction is in progress. View the official source.
Sponsors
Official sponsors from legislative records.
1 on record
Primary sponsor
Arguments
Reasons offered for and against this legislation.
Arguments in favor
No arguments in favor have been submitted.
Submit yoursArguments opposed
No arguments opposed have been submitted.
Submit yours