CRITICAL INFRASTRUCTURE PROTECTION AUDIT; REPORT.

(a) The advisory committee shall investigate potential threats to critical infrastructure in this state in the event of a geopolitical conflict.

(b) The advisory committee shall produce and submit to the governor a report of the committee's findings not later than October 1, 2026.

(c) The initial report must:

(1) identify all critical infrastructure and other assets within this state that could reasonably be targeted in a malicious act by a foreign adversary in the event of a geopolitical conflict and would result in a significant negative impact on the public health, safety, economic security, or physical security of this state's citizens;

(2) identify specific risks posed to each critical infrastructure or other asset identified under Subdivision (1) in the event of a geopolitical conflict, including known vectors of attack such as cyberattack and physical sabotage; and

(3) develop strategies to:

(A) prevent and protect against threats posed to critical infrastructure and other assets identified under Subdivision (1) in the event of a geopolitical conflict; and

(B) minimize the damage to this state if a malicious act described by Subdivision (1) succeeds in damaging critical infrastructure and other assets in this state.

(d) The advisory committee may conduct additional investigations and produce additional reports as the committee determines necessary.