February 29, 2024, Introduced by Senator MCCANN and referred to the Committee on Appropriations.

A bill to create a coordinated cybersecurity defense organization and security operations center for this state's public universities; to provide for the extension of the cybersecurity defense program to certain other public entities; and to provide for the powers and duties of certain state governmental officers and entities.

the people of the state of michigan enact:

Sec. 1. This act may be cited as the "statewide higher education security operations center act".

Sec. 2. As used in this act:

(a) "Department" means the department of labor and economic opportunity.

(b) "Fund" means the statewide higher education security operations center fund created in section 4.

(c) "MiSOC" means the coordinated cybersecurity defense organization and security operations center described in section 3.

(d) "Participating public university" means a public university that participates in the development and oversight of MiSOC as described in section 3.

(e) "Public university" means a state university described in section 4, 5, or 6 of article VIII of the state constitution of 1963.

Sec. 3. Participating public universities, in coordination with the nonprofit Merit Network, Inc., and with the support of the Michigan Association of State Universities, shall develop and oversee a coordinated cybersecurity defense organization and security operations center (MiSOC) that does all of the following:

(a) Successfully defends all participating public universities from cyberattacks with threat detection, prevention, and response capabilities that operate 24 hours a day, every day of the year, throughout a 3-year deployment and testing phase.

(b) Minimizes redundant institutional costs for cyber defense through scalable collaboration.

(c) Leverages collective academic expertise through academic programs and practicums.

(d) Establishes an interinstitutional core for cybersecurity research and intelligence.

(e) Creates a hub for teaching and learning through cybersecurity internships, workshops, curriculum development, and on-the-job training.

(f) Drives this state's economic development through the training of cybersecurity professionals.

(g) Partners with Merit Network, Inc. and its unique position as the established network operator for higher education in this state.

(h) Operates at a scale to service additional public entities as described in subdivision (i).

(i) Following the first year of the MiSOC program, extends an offer to contract for MiSOC services to interested community colleges, intermediate school districts, public K-12 entities, public libraries, and other public entities.

Sec. 4. (1) The statewide higher education security operations center fund is created in the state treasury.

(2) The state treasurer shall deposit money and other assets received from any source in the fund. The state treasurer shall direct the investment of money in the fund and credit interest and earnings from the investments to the fund.

(3) The department is the administrator of the fund for audits of the fund.

(4) Money in the fund at the close of the fiscal year does not lapse to the general fund.

(5) The department shall expend money from the fund on appropriation only to fund the initial startup and build out of MiSOC.