Tex. Gov't Code § 2063.408 · Subchapter E. CYBERSECURITY PREPARATION AND PLANNING
CLOUD COMPUTING STATE RISK AND AUTHORIZATION MANAGEMENT PROGRAM.
Text — Current through the 89th 2nd Called Legislative Session, 2025
(a) In this section, "cloud computing service" has the meaning assigned by Section 2157.007.
(b) The command shall establish a state risk and authorization management program to provide a standardized approach for security assessment, authorization, and continuous monitoring of cloud computing services that process the data of a state agency. The program must allow a vendor to demonstrate compliance by submitting documentation that shows the vendor's compliance with a risk and authorization management program of:
(1) the federal government; or
(2) another state that the command approves.
(c) The command by rule shall prescribe:
(1) the categories and characteristics of cloud computing services subject to the state risk and authorization management program; and
(2) the requirements for certification through the program of vendors that provide cloud computing services.
(d) A state agency shall require each vendor contracting with the agency to provide cloud computing services for the agency to comply with the requirements of the state risk and authorization management program. The command shall evaluate vendors to determine whether a vendor qualifies for a certification issued by the department reflecting compliance with program requirements.
(e) A state agency may not enter or renew a contract with a vendor to purchase cloud computing services for the agency that are subject to the state risk and authorization management program unless the vendor demonstrates compliance with program requirements.
(f) A state agency shall require a vendor contracting with the agency to provide cloud computing services for the agency that are subject to the state risk and authorization management program to maintain program compliance and certification throughout the term of the contract.
Notes and commentary — not statutory text
History
Added by Acts 2021, 87th Leg., R.S., Ch. 567 (S.B. 475), Sec. 2, eff. June 14, 2021.
Transferred, redesignated and amended from Government Code, Section 2054.0593 by Acts 2025, 89th Leg., R.S., Ch. 331 (H.B. 150), Sec. 16, eff. September 1, 2025.
Source of truth
- Edition
- Current through the 89th 2nd Called Legislative Session, 2025
- Official file
- https://statutes.capitol.texas.gov/Docs/GV/htm/GV.2063.htm
- Text hash
- sha256 b0d85616ba5dae5050838394911c14bf0773ae25023e98196353eb7a6b767a27
- Composed by
- compose_tx.py 2026-10-05: the Legislative Council's chapter files read in document order; verify_tx.py's independent reading (lxml DOM walk) agrees character for character
This section cites
Provisions in this library that the text above cites, as it prints each citation. A range cited as “ss. 61.13-61.16” links its first and last provisions.
Procedural information only. Not legal advice and not a substitute for the advice of an attorney. Confirm the current text with the official publisher before relying on it.