Security of State Information Technology Systems

Technology

Passed Legislature

This bill passed both chambers and reached final enrollment, even if later executive action is not shown here.

Sponsor: Rodriguez
Last action: 2026-03-13
Official status: Senate - Died in Governmental Oversight and Accountability
Effective date: 2026-07-01

Plain English Breakdown

The bill summary and text do not provide specifics on penalties for non-compliance or exact measures of compliance.

State Information Technology Security

This bill requires Florida state agencies to use specific cloud-native cybersecurity platforms and mandates the state chief information officer to report on security progress by October 1, 2026.

What This Bill Does

Requires each state agency to deploy cloud-native cybersecurity platforms designed to safeguard cloud and hybrid infrastructure.
Specifies criteria for these platforms, such as providing unified visibility across multi-cloud environments, continuous posture management, real-time threat detection, and automated compliance monitoring.
Requires the state chief information officer to brief legislative committees by October 1, 2026, on security progress and risks.

Who It Names or Affects

Florida state agencies
The state chief information officer

Terms To Know

cloud-native cybersecurity platforms: Software designed specifically for cloud environments to protect against cyber threats and vulnerabilities.
state chief information officer: The person responsible for overseeing the state's technology infrastructure and security.

Limits and Unknowns

It is unclear if all state agencies will be able to meet these requirements by the deadline.
The bill does not specify what happens if an agency fails to comply with the cybersecurity platform requirement.

Bill History

2026-03-13 Senate
• Died in Governmental Oversight and Accountability
2026-01-22 Senate
• Introduced
2026-01-16 Senate
• Referred to Governmental Oversight and Accountability; Appropriations Committee on Agriculture, Environment, and General Government; Appropriations
2026-01-09 Senate
• Filed

Official Summary Text

Security of State Information Technology Systems; Requiring state agencies to deploy certain cloud-native cybersecurity platforms; requiring the state chief information officer to brief legislative committees on specified information by a specified date, etc.

Current Bill Text

Read the full stored bill text

Florida Senate
-
2026

SB 1522

By
Senator Rodriguez

40-01439-26 20261522__
1 A bill to be entitled
2 An act relating to security of state information
3 technology systems; creating s. 282.3187, F.S.;
4 requiring state agencies to deploy certain cloud
5 native cybersecurity platforms; requiring state
6 agencies to use platforms that meet specified
7 criteria; requiring the state chief information
8 officer to brief legislative committees on specified
9 information by a specified date; providing an
10 effective date.
11
12 Be It Enacted by the Legislature of the State of Florida:
13
14 Section 1. Section 282.3187, Florida Statutes, is created
15 to read:
16
282.3187
Security of state technology systems
.—

17
(1)

As the state continues to implement its cloud-first

18
policy and transition agency applications and datasets into

19
modern cloud environments, each state agency shall deploy cloud

20
native cybersecurity platforms designed to safeguard cloud and

21
hybrid infrastructure.

22
(2)

State agencies shall use platforms that:

23
(a)

Provide unified visibility across multi-cloud and

24
hybrid environments;

25
(b)

Enable continuous posture management, misconfiguration

26
detection, and automated risk prioritization to reduce cloud

27
attack surface;

28
(c)

Support secure cloud application development, including

29
code-to-runtime protection;

30
(d)

Deliver real-time threat detection and response within

31
cloud workloads and identities; and

32
(e)

Provide automated compliance monitoring across state

33
and federal cybersecurity frameworks.

34
(3)

By October 1, 2026, the state chief information officer

35
shall brief the appropriate committees of the Legislature on all

36
of the following:

37
(a)

The state’s progress in continuously monitoring the

38
security of all cloud, on-premises, and hybrid application

39
environments.

40
(b)

The identification of systemic risks and

41
misconfigurations across agency cloud deployments.

42
(c)

The development of a future artificial intelligence

43
security roadmap, including recommendations for securing

44
artificial intelligence systems, models, and automated

45
decisionmaking tools used by state agencies.

46 Section 2. This act shall take effect July 1, 2026.