JBE 17-31

Louisiana Cybersecurity Commission

WHEREAS,        Louisiana is positioned as an international leader in regards to cybersecurity capabilities, working through partnerships that align the unique resources of state and local government, institutions of higher education, Louisiana-based federal government installations, and private sector organizations.

WHEREAS,        the State of Louisiana must continue its commitment to establishing cybersecurity capabilities and resources in order to adequately maintain the stability of public services while ensuring proper privacy and protection for the data that is entrusted to the State of Louisiana by our citizens;

WHEREAS,        information systems, networks, and critical infrastructure around the world are threatened by increasingly sophisticated cyber-attacks; and

WHEREAS,         cyber-attacks aimed at breaching and damaging computers, networks, and infrastructure in Louisiana represent a major security risk and increase the state's vulnerability to economic disruption, critical infrastructure damage, privacy violations, and identify theft; and

WHEREAS,         state government agencies are responsible for protecting the state's computer networks and to investigate criminal attacks on state computer networks and critical infrastructure systems under current state law; and

WHEREAS,         the increasing number and complexity of cyber-attacks demand heightened levels of coordination, information sharing, and emergency response between state government and federal agencies, local governments, tribal governments, private companies, academic institutions, and other entities in order to protect computer networks and critical infrastructure systems from damage or unauthorized access.

NOW, THEREFORE, I, JOHN BEL EDWARDS, Governor of the State of Louisiana, in accordance with the authority vested in me by the Constitution and statutes of the State of Louisiana, do hereby order and direct as follows:

SECTION 1:        The Louisiana Cybersecurity Commission is hereby established. The Commission shall coordinate cybersecurity efforts among state governmental agencies, local governments, tribal governments, private companies, academic institutions, and other entities in both the public and private sectors. Active participation by federal agencies is encouraged and would further enhance the objectives of the Commission.

SECTION 2:        The members of the Commission shall be appointed by and serve at the pleasure of the Governor and shall be comprised of up to fifteen (15) members. The Governor shall designate a Chairman and Co- Chairman from among the appointed members.

Section 3:        The Louisiana National Guard (LANG) will provide staffing for the Commission and will be responsible for providing strategic direction to the delegates, subcommittees and working group leads in order to meet the underpinning goals of the Commission as directed by the Governor and Chairs.

SECTION 4:        In order to be successful in its mission, this Commission must be able to synchronize its efforts with other state, local, and federal agencies who are stakeholders in the cybersecurity for our state. Therefore, the following agencies are hereby invited and encouraged to have a representative participate as ex-officio members on this Commission:

A. Stephenson Disaster Management Institute (SDMI)

B. Louisiana Business Emergency Operations (LA BEOC)

C. Federal Bureau of Investigation (FBI) Cyber Task Force

D. The Cyber Innovation Center (CIC)

E. Department of Homeland Security (DHS)

F. Louisiana Department of Justice (LADOJ)

G.  Stephenson Technology Corporation

H. Louisiana Technology Research Institute

SECTION 5:        The goals of the Commission include, but are not limited to, the following:

1. Identify, prioritize, and mitigate Louisiana’s cyber risk;

2. Promote cybersecurity awareness and recommend best practices for the security of all of Louisiana’s cyber ecosystem;

3. Promote actions, including legislative, administrative, and regulatory, where appropriate, to enhance cybersecurity in Louisiana;

4. Grow Louisiana’s cybersecurity workforce and educate the public/private sectors about cybersecurity;

5. Enhance Louisiana cyber emergency preparedness and response capabilities;

6. Monitor, understand, and share cyber threat information;

7. Build comprehensive digital forensics and cyber investigative capability;

8. Identify, prioritize, acquire, and establish funding mechanisms to enhance Louisiana’s cybersecurity efforts; and

9. Facilitate economic development by promoting a cyber-safe Louisiana for businesses and consumers.

SECTION 6:        The Commission shall provide a quarterly report containing an overview of goals, objectives, priorities, estimated completion dates of activities, and recommendations to the Office of the Governor. The Commission shall establish the mechanisms required to produce quarterly cyber incident recap reports to the Office of the Governor.

SECTION 7:        The Commission shall provide an annual report to House and Senate Committees on Homeland Security in support of the bipartisan work being done on homeland security legislation to protect against cyber-attacks.

SECTION 8:        Commission members shall not receive additional compensation or per diem. Further, all voting members shall be subject to the ethical restrictions contained in La. R.S. 42:1113

SECTION 9:        This Order is effective upon signature and shall continue in effect until amended, modified, terminated, or rescinded by the Governor, or terminated by operation of law.

IN WITNESS WHEREOF, I have set my hand officially and caused to be affixed the Great Seal of Louisiana, at the Capitol, in the City of Baton Rouge, on this 6th day of December, 2017.

John Bel Edwards

Tom Schedler
Secretary of State