West VirginiaWest Virginia agencies review cybersecurity readiness each year
West Virginia’s cybersecurity law requires covered information custodians to review their readiness each year and may allow charges if they skip the review.
What it does
Covered information custodians must review their cybersecurity readiness with the Office of Technology at least once a year. Those that skip the review may be charged related costs.
Covered information custodians must follow cybersecurity standards and complete required risk checks. The Chief Information Security Officer may set assessment rules and minimum training requirements for state system users.
State contracts for software designed for common desktop or server hardware must let the state run it on hardware the state chooses.
Argument forRisk checks and yearly reviews could help agencies find security gaps and take steps to protect information they hold.
Argument againstAgencies that miss the yearly review could face charges for checks and fixes, up to the Office of Technology’s actual costs.
More detail
Each covered information custodian must take part in a cybersecurity review with the Office of Technology. This applies to information custodians receiving centralized support from the Office of Technology and other entities covered by the article. If a custodian skips the review, the Office of Technology may recover related costs, capped at its actual costs for the review, resolving problems, and protecting the network and its operations. The review must happen before November 30 each year.
Covered information custodians must complete required risk assessments and follow cybersecurity standards and policies. The article applies to state agencies except higher education institutions, the State Police, state constitutional officers, the Legislature, and the Judiciary. Custodians must send requests for exceptions to the Chief Information Security Officer for approval. The Chief Information Security Officer may set assessment rules and minimum training requirements for users of state systems, networks, and devices.
State software contracts must allow the state to run covered software on hardware of its choosing. The requirement applies to state contracts for software applications. This applies to licensed software designed to run on generally available desktop or server hardware.
Where do you stand?
Choose your position
Tell your reps
Take a position to see your representatives and ways to contact them.
Where it stands
- Introduced
- Passed House
- Passed Senate
- To Governor
- Became Law
Looking ahead
No hearings or votes scheduled.
History
- 2026
- Jun 29Chapter 192, Acts, Regular Session, 2026Latest
- Apr 1Approved by Governor Patrick Morrisey 4/1/2026Major
- Mar 25To Governor 3/25/26To Governor
- Mar 14Approved by Governor Patrick Morrisey 4/1/2026 - House JournalMajor
- Vote recorded PASSAGE-SENATE AMENDED HB. Result: pass.Lower
- Mar 14Approved by Governor Patrick Morrisey 4/1/2026 - Senate JournalBecame Law
- Mar 14To Governor 3/25/2026 - Senate JournalMinor
- Mar 14House Message received
- Mar 14Completed legislative action
- Mar 14Communicated to Senate
- Mar 14House concurred in Senate amendment and passed bill (Roll No. 644)
- Mar 14House received Senate message
- Mar 12Senate requests House to concur
- Vote recorded Passage. Result: pass.Upper
- Mar 12Passed Senate (Roll No. 514)Passed Senate
- Mar 12Read 3rd timeMinor
- Mar 12On 3rd reading
- Mar 11Committee amendment adopted (Voice vote)
- Mar 11Read 2nd timeMinor
- Mar 11On 2nd reading
- Mar 10Read 1st timeMinor
- Mar 10Immediate consideration
- Mar 10Reported do pass, with amendmentMinor
- Mar 4To Government OrganizationMinor
- Mar 4To Government OrganizationMinor
- Mar 4Introduced in SenateMinor
- Mar 2Communicated to Senate
- Vote recorded PASSAGE. Result: pass.Lower
- Mar 2Passed House (Roll No. 251)Passed House
- Mar 2Read 3rd timeMinor
- Mar 2On 3rd reading, Special Calendar
- Feb 27Read 2nd timeMinor
- Feb 27On 2nd reading, Special Calendar
- Feb 26Read 1st timeMinor
- Feb 26On 1st reading, Special Calendar
- Feb 25Do pass
- Feb 20Markup Discussion
- Feb 17To House Energy and Public WorksMinor
- Feb 17Introduced in HouseMinor
- Feb 17To Energy and Public Works
- Feb 17Filed for introductionIntroduced
TechnologyGovernment & Ethics