HB1549

House Bill 1549, titled the 'Arkansas Cybersecurity Act of 2025,' establishes the State Cybersecurity Office to centralize and standardize cybersecurity practices across Arkansas state agencies. The office, led by the State Information Security Officer, is tasked with creating statewide policies for data protection, threat monitoring, incident response, and compliance auditing. State agencies are required to adhere to these minimum standards, though they may adopt stricter policies if necessary. The bill implements a 'functional reporting' structure where agency cybersecurity personnel report to the State Cybersecurity Office while remaining under the administrative and financial management of their respective agencies. The office is also required to report audit findings and compliance status to the Joint Committee on Advanced Communications and Information Technology in closed meetings twice per year. The act is designed to strengthen the state's digital defenses and ensure a unified response to cybersecurity threats.