87R19817 YDB-F     By: Shaheen, Lucio III, Deshotel, Raymond, H.B. No. 4071       Hunter     Substitute the following for H.B. No. 4071:     By:  Paddie C.S.H.B. No. 4071       A BILL TO BE ENTITLED   AN ACT   relating to the requirements for the purchase of endpoint devices   by a state agency.          BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:          SECTION 1.  Subchapter N-1, Chapter 2054, Government Code,   is amended by adding Section 2054.5193 to read as follows:          Sec. 2054.5193.  ENDPOINT DEVICE CYBERSECURITY. (a) In   this section, "endpoint device" has the meaning assigned by Section   2157.201.          (b)  The department may compile a list of endpoint devices   that are approved for purchase by a state agency. An approved   endpoint device must meet cybersecurity industry-recognized   standards and best practices established by the department.          (c)  The department shall update any list of approved   endpoint devices the department issues under Subsection (b) not   later than the first anniversary of the date the department amends a   standard established by the department under Subsection (b).          (d)  The department may adopt rules to implement this   section.          SECTION 2.  Chapter 2157, Government Code, is amended by   adding Subchapter E to read as follows:   SUBCHAPTER E. ENDPOINT SECURITY DEVICE          Sec. 2157.201.  DEFINITIONS. In this subchapter:                (1)  "Endpoint device" means personal computing goods   and multi-functional devices.                (2)  "Multi-functional device" includes computer   imaging devices that perform at least two of the following   functions:                      (A)  printing;                      (B)  copying;                      (C)  scanning; or                      (D)  faxing.                (3)  "Personal computing goods" includes desktop   computers, laptop computers, all-in-one computers, tablet   computers, thin client computers, wireless communication devices,   computer monitors, and associated software and network access   devices.                (4)  "State agency" means a board, commission,   department, office, or other agency in the executive, legislative,   or judicial branch of state government that is created by the   constitution or a statute of this state.          Sec. 2157.202.  ENDPOINT DEVICE STANDARDS. (a) A state   agency may purchase or lease an endpoint device only if the device   meets the cybersecurity industry-recognized standards and best   practices established by the department.          (b)  An endpoint device included on a list of approved   endpoint security devices compiled under Section 2054.5193   satisfies the requirements of Subsection (a).          SECTION 3.  This Act takes effect immediately if it receives   a vote of two-thirds of all the members elected to each house, as   provided by Section 39, Article III, Texas Constitution.  If this   Act does not receive the vote necessary for immediate effect, this   Act takes effect September 1, 2021.