AB43,257,128 16.971 (2) (j) Ensure that all executive branch agencies, including the board
9of regents of the University of Wisconsin System for purposes of s. 16.978,
develop
10and operate with clear guidelines and standards in the areas of information
11technology systems development and that they employ good management practices
12and cost-benefit justifications.
AB43,179 13Section 179. 16.971 (2) (o) of the statutes is created to read:
AB43,257,1614 16.971 (2) (o) Assist the elections commission with information technology
15systems development for purposes of facilitating the registration of eligible electors
16under s. 6.256.
AB43,180 17Section 180. 16.971 (4) (a) of the statutes is amended to read:
AB43,257,2318 16.971 (4) (a) The department may license or authorize executive branch
19agencies to license computer programs developed by executive branch agencies or
20security operations centers and regional security operations centers under s. 16.978

21to the federal government, other states and municipalities. Any agency other than
22an executive branch agency may license a computer program developed by that
23agency to the federal government, other states and municipalities.
AB43,181 24Section 181. 16.971 (9) of the statutes is amended to read:
AB43,258,8
116.971 (9) In conjunction with the public defender board, the director of state
2courts, the departments of corrections and justice, and district attorneys, the
3department may maintain, promote, and coordinate automated justice information
4systems that are compatible among counties and the officers and agencies specified
5in this subsection, using the moneys appropriated under s. 20.505 (1) (dm), (kh), and
6(kq). The department shall annually report to the legislature under s. 13.172 (2)
7concerning the department's efforts to improve and increase the efficiency of
8integration of justice information systems.
AB43,182 9Section 182. 16.972 (2) (g) of the statutes is amended to read:
AB43,258,2010 16.972 (2) (g) Assume direct responsibility for the planning and development
11of any information technology system in the executive branch of state government
12outside of the University of Wisconsin System, but including the University of
13Wisconsin System for purposes of s. 16.978,
that the department determines to be
14necessary to effectively develop or manage the system, with or without the consent
15of any affected executive branch agency and the board of regents of the University
16of Wisconsin System for purposes of s. 16.978
. The department may charge any
17executive branch agency and the board of regents for the department's reasonable
18costs incurred in carrying out its functions under this paragraph on behalf of that
19agency or a security operations center or regional security operations center under
20s. 16.978
.
AB43,183 21Section 183. 16.973 (3) of the statutes is amended to read:
AB43,259,422 16.973 (3) Facilitate the implementation of statewide initiatives, including
23development and maintenance of policies and programs to protect the privacy of
24individuals who are the subjects of information contained in the databases of
25agencies or security operations centers and regional security operations centers

1under s. 16.978
, and of technical standards and sharing of applications among
2agencies, security operations centers and regional security operations centers, and
3any participating local governmental units or other eligible entities, as defined in s.
416.978 (1) (c),
or entities in the private sector.
AB43,184 5Section 184. 16.973 (8) of the statutes is amended to read:
AB43,259,156 16.973 (8) Offer the opportunity to local governmental units and other eligible
7entities, as defined in s. 16.978 (1) (c), as determined by the department,
to
8voluntarily obtain computer or supercomputer services from the department or a
9security operations center or regional security operations center under s. 16.978

10when those services are provided under s. 16.972 (2) (b) or (c) or 16.978, and to
11voluntarily participate in any master contract established by the department or a
12security operations center or regional security operations center
under s. 16.972 (2)
13(h) or 16.978 or in the use of any informational system or device provided by the
14department or a security operations center or regional security operations center
15under s. 16.974 (3) or 16.978.
AB43,185 16Section 185. 16.978 of the statutes is created to read:
AB43,259,17 1716.978 Security operations centers. (1) Definitions. In this section:
AB43,259,1818 (a) Notwithstanding s. 16.97 (1m), “agency” includes each authority.
AB43,259,1919 (b) “Division” means the division of enterprise technology in the department.
AB43,259,2020 (c) “Eligible entity” means all of the following:
AB43,259,2121 1. An agency.
AB43,259,2222 2. A local governmental unit.
AB43,259,2323 3. An educational agency, as defined in s. 16.99 (2g).
AB43,259,2424 4. A federally recognized American Indian tribe or band located in this state.
AB43,259,2525 5. A critical infrastructure entity, as determined by the division.
AB43,260,1
16. Any other entity identified by the department by rule.
AB43,260,32 (d) “Managed security services” means services intended to reduce the impact
3of cybersecurity threats.
AB43,260,7 4(2) Establishment of security operations centers. (a) The department shall
5establish one or more security operations centers or one or more regional security
6operations centers, or both, to provide for the cybersecurity of information technology
7systems maintained by eligible entities.
AB43,260,128 (b) All security operations centers, including regional centers, established by
9the department shall be under the supervision and control of the division. The
10department shall include the centers in carrying out its responsibilities, powers, and
11duties under ss. 16.971 (2) (b), (c), (cm), (g), (h), and (k), 16.972 (2) (d) and (e), and
1216.973 (1), (3), (4), and (5), as determined by the department.
AB43,260,1413 (c) The department may coordinate with any of the following entities in the
14establishment of a security operations center or regional security operations center:
AB43,260,1515 1. A campus, as defined in s. 36.05 (3).
AB43,260,1616 2. A college campus, as defined in s. 36.05 (6m).
AB43,260,1717 3. An institution, as defined in s. 36.05 (9).
AB43,260,1818 4. A university, as defined in s. 36.05 (13).
AB43,260,22 19(3) Duties of the division. (a) The division shall manage the operation of each
20security operations center and regional security operations center established under
21sub. (2), including by establishing managed security services guidelines and
22standard operating procedures for the operation of the centers.
AB43,261,223 (b) As appropriate and in coordination with participating eligible entities, the
24division may provide, and if provided, shall oversee the provision of, managed

1security services and other support through each security operations center and
2regional security operations center, including all of the following:
AB43,261,43 1. Real-time security monitoring to detect and respond to cybersecurity events
4that may jeopardize this state or the residents of this state.
AB43,261,65 2. Continuous, 24-hour alerts and guidance for defeating cybersecurity
6threats.
AB43,261,87 3. Immediate incident response to counter cyber activity that exposes this state
8or the residents of this state to cybersecurity risks.
AB43,261,99 4. Educational services regarding cybersecurity.
AB43,261,1110 5. Dissemination of incident-related information to supported eligible entities,
11constituents, and external parties.
AB43,261,1512 (c) In operating the security operations centers and regional security
13operations centers, including functions such as detecting, analyzing, responding to,
14and prioritizing responses to cybersecurity incidents, the division shall do all of the
15following:
AB43,261,1716 1. Collaborate with any relevant state, local, federal, critical infrastructure, or
17tribal entity in accordance with statewide plans.
AB43,261,2018 2. Lead executive branch agencies through cybersecurity incidents, including
19by directing and prioritizing cybersecurity incident responses, and provide guidance
20and expertise to other eligible entities that may be affected by such events.
AB43,261,2321 3. If needed to respond to a substantial external cybersecurity threat, take any
22action, including disconnecting the computer network of an eligible entity receiving
23managed security services.
AB43,262,524 (d) The division shall ensure that each agency in the executive branch of state
25government uses the division's managed security services to the extent practicable.

1No executive branch agency may purchase managed security services from a person
2other than the department unless the division determines that the division cannot
3provide comparable managed security services at a reasonable cost and the division
4approves the purchase. The division shall establish a process for making such
5determinations and approvals.
AB43,262,6 6(4) Powers of the division. The division may do all of the following:
AB43,262,87 (a) Enter into contracts and interagency agreements as necessary to
8administer this section.
AB43,262,99 (b) Apply for and use the proceeds from grants to administer this section.
AB43,262,1310 (c) Charge fees to recover costs associated with the division's provision of
11managed security services and other cybersecurity support services provided under
12this section, including via an assessment to agencies or as a component of any
13services provided.
AB43,262,15 14(5) Center facilities. The division may establish a security operations center,
15including a regional center, only at a facility that satisfies all of the following:
AB43,262,1816 (a) The facility is a secure and restricted facility that contains cybersecurity
17infrastructure, an available trained workforce, and supportive educational
18capabilities.
AB43,262,2019 (b) All entrances and critical areas can be controlled and monitored to prevent
20unauthorized entry.
AB43,262,2121 (c) Access can be limited to only authorized individuals.
AB43,262,2322 (d) Security alarms can be monitored by local law enforcement or security
23companies according to service availability.
AB43,263,3
1(e) Operational information can be restricted to personnel at the facility, except
2as coordinated and approved by both the division and the participating eligible
3entity.
AB43,186 4Section 186. 16.9945 of the statutes is repealed.
AB43,187 5Section 187 . 17.03 (10m) of the statutes is created to read:
AB43,263,86 17.03 (10m) If the office is filled by appointment of the governor for a fixed term
7by and with the advice and consent of the senate, the incumbent's term expires or,
8if later, the governor submits his or her nomination for the office to the senate.
AB43,188 9Section 188 . 17.18 of the statutes is amended to read:
AB43,263,13 1017.18 Vacancies, U.S. senator and representative in congress; how
11filled.
Vacancies in the office of U.S. senator or representative in congress from this
12state shall be filled by election, as provided in s. 8.50 (4) (b), for the residue of the
13unexpired term
(4m).
AB43,189 14Section 189. 18.08 (7) of the statutes is created to read:
AB43,263,2115 18.08 (7) Notwithstanding sub. (3), no moneys transferred under 2023
16Wisconsin Act .... (this act), section 9251 (1 ), may be commingled with other moneys
17in the capital improvement fund and all earnings on or income from investments of
18the moneys transferred under 2023 Wisconsin Act .... (this act), section 9251 (1), and
19all excess moneys so transferred that are not used to fund building projects
20authorized in the 2023-25 Authorized State Building Program, shall be deposited in
21or transferred to the general fund.
AB43,190 22Section 190 . 18.16 (title) of the statutes is amended to read:
AB43,263,25 2318.16 (title) Minority financial advisers and investment firms;
24disabled
; veteran-owned; lesbian, gay, bisexual, or transgender-owned;
25and disability-owned
financial advisers and investment firms.
AB43,191
1Section 191. 18.16 (1) (a) of the statutes is renumbered 18.16 (1) (e) and
2amended to read:
AB43,264,53 18.16 (1) (e) “Disabled veteran-owned Veteran-owned financial adviser"
4means a financial adviser certified by the department of administration under s.
516.283 (3).
AB43,192 6Section 192 . 18.16 (1) (ae) of the statutes is created to read:
AB43,264,87 18.16 (1) (ae) “Disability-owned financial adviser" means a financial adviser
8certified by the department of administration under s. 16.289 (3).
AB43,193 9Section 193 . 18.16 (1) (af) of the statutes is created to read:
AB43,264,1110 18.16 (1) (af) “Disability-owned investment firm" means an investment firm
11certified by the department of administration under s. 16.289 (3).
AB43,194 12Section 194. 18.16 (1) (b) of the statutes is renumbered 18.16 (1) (f) and
13amended to read:
AB43,264,1514 18.16 (1) (f) “Disabled veteran-owned Veteran-owned investment firm" means
15an investment firm certified by the department of administration under s. 16.283 (3).
AB43,195 16Section 195 . 18.16 (1) (br) of the statutes is created to read:
AB43,264,1917 18.16 (1) (br) “Lesbian, gay, bisexual, or transgender-owned financial adviser"
18means a financial adviser certified by the department of administration under s.
1916.288 (3).
AB43,196 20Section 196 . 18.16 (1) (bs) of the statutes is created to read:
AB43,264,2321 18.16 (1) (bs) “Lesbian, gay, bisexual, or transgender-owned investment firm"
22means an investment firm certified by the department of administration under s.
2316.288 (3).
AB43,197 24Section 197. 18.16 (2) (b) of the statutes is amended to read:
AB43,265,4
118.16 (2) (b) Except as provided in sub. (7), in contracting public debt by
2competitive sale, the commission shall make efforts to ensure that at least 1 percent
3of the total public indebtedness contracted in each fiscal year is underwritten by
4disabled veteran-owned investment firms.
AB43,198 5Section 198 . 18.16 (2) (c) of the statutes is created to read:
AB43,265,96 18.16 (2) (c) Except as provided in sub. (7), in contracting public debt by
7competitive sale, the commission shall make efforts to ensure that at least 1 percent
8of the total public indebtedness contracted in each fiscal year is underwritten by
9lesbian, gay, bisexual, or transgender-owned investment firms.
AB43,199 10Section 199 . 18.16 (2) (d) of the statutes is created to read:
AB43,265,1411 18.16 (2) (d) Except as provided in sub. (7), in contracting public debt by
12competitive sale, the commission shall make efforts to ensure that at least 1 percent
13of the total public indebtedness contracted in each fiscal year is underwritten by
14disability-owned investment firms.
AB43,200 15Section 200. 18.16 (3) (b) of the statutes is amended to read:
AB43,265,1916 18.16 (3) (b) Except as provided under sub. (7), in contracting public debt by
17negotiated sale, the commission shall make efforts to ensure that at least 1 percent
18of total public indebtedness contracted in each fiscal year is underwritten by disabled
19veteran-owned investment firms.
AB43,201 20Section 201 . 18.16 (3) (c) of the statutes is created to read:
AB43,265,2421 18.16 (3) (c) Except as provided under sub. (7), in contracting public debt by
22negotiated sale, the commission shall make efforts to ensure that at least 1 percent
23of total public indebtedness contracted in each fiscal year is underwritten by lesbian,
24gay, bisexual, or transgender-owned investment firms.
AB43,202 25Section 202 . 18.16 (3) (d) of the statutes is created to read:
AB43,266,4
118.16 (3) (d) Except as provided under sub. (7), in contracting public debt by
2negotiated sale, the commission shall make efforts to ensure that at least 1 percent
3of total public indebtedness contracted in each fiscal year is underwritten by
4disability-owned investment firms.
AB43,203 5Section 203. 18.16 (4) (b) of the statutes is amended to read:
AB43,266,106 18.16 (4) (b) Except as provided under sub. (7), in contracting public debt by
7competitive sale or negotiated sale, the commission shall make efforts to ensure that
8at least 1 percent of the total moneys expended in each fiscal year for the services of
9financial advisers are expended for the services of disabled veteran-owned financial
10advisers.
Loading...
Loading...