Law / United States / 
Mississippi
State agency cyberattack and ransomware demand reporting to the Department of Information Technology Services
State agency cyberattack and ransomware reporting, Miss. Code Ann. section 25-53-201(5)
In force since .
A vulnerability and incident reporting rule binding government bodies.
- Obligation class
- Reporting, Security
As of .
What it requires
- This binds every state agency.
- Notify the Mississippi Department of Information Technology Services of any cyberattack, or any demand for payment as a result of ransomware, no later than the close of the next business day following the discovery of the cyberattack or demand.
- Use the reporting format the Department develops to give the notification.
These lines are LexLint's reading of the law's text, as of .
What this law does
A cyberattack is any attempt to gain illegal access, including any data breach, to a computer, computer system or computer network for purposes of causing damage, disruption or harm. From and after , all state agencies shall notify the Department of Information Technology Services of any cyberattack or demand for payment as a result of ransomware no later than the close of the next business day following the discovery.
The Department shall develop a reporting format to be utilized by state agencies to provide the notification. The reports are exempt from the Mississippi Public Records Act of 1983.