Law / United States / 
Virginia
Public bodies: incident reporting to the Virginia Fusion Intelligence Center
In force since .
A vulnerability and incident reporting rule binding government bodies.
- Obligation class
- Reporting, Prohibition
As of .
What it requires
- This duty binds every public body: any legislative body, any court of the Commonwealth, any authority, board, bureau, commission, district, or agency of the Commonwealth, any political subdivision of the Commonwealth (including counties, cities, towns, school boards, and the governing boards of institutions of higher education), and other organizations, corporations, or agencies in the Commonwealth supported wholly or principally by public funds; it does not bind a private business.
- Report to the Virginia Fusion Intelligence Center, within 24 hours from when the incident was discovered, all known incidents that threaten the security of the Commonwealth's data or communications or result in exposure of data protected by federal or state laws.
- Report to the Virginia Fusion Intelligence Center, within 24 hours from when the incident was discovered, other incidents compromising the security of your information technology systems with the potential to cause major disruption to the normal activities of your public body or other public bodies.
- Do not use, directly or through work with or on behalf of another public body, any hardware, software, or services that the United States Department of Homeland Security has prohibited for use on federal systems.
These lines are LexLint's reading of the law's text, as of .
What this law does
Every public body must report all known incidents that threaten the security of the Commonwealth's data or communications or result in exposure of data protected by federal or state laws, and other incidents compromising the security of the public body's information technology systems with the potential to cause major disruption to normal activities of the public body or other public bodies.
Such reports must be made to the Virginia Fusion Intelligence Center within 24 hours from when the incident was discovered. The Virginia Fusion Intelligence Center shares such reports with the Chief Information Officer or the Chief Information Officer's designee at the Virginia Information Technologies Agency promptly upon receipt.
A public body means any legislative body, any court of the Commonwealth, any authority, board, bureau, commission, district, or agency of the Commonwealth, any political subdivision of the Commonwealth, and other organizations, corporations, or agencies in the Commonwealth supported wholly or principally by public funds.
No public body may use, directly or through work with or on behalf of another public body, any hardware, software, or services that have been prohibited by the United States Department of Homeland Security for use on federal systems.