Changeflow GovPing Government General State Cybersecurity Program Requirements and CI...
Priority review Rule Added Final

State Cybersecurity Program Requirements and CISO Authority

Favicon for changeflow.com West Virginia Legislative Events
Published
Detected
Email

Summary

West Virginia Governor signed HB5638 into law on April 1, 2026, establishing requirements for the state's cybersecurity program and defining the authority and responsibilities of the state Chief Information Security Officer. The bill clarifies the process for cybersecurity program reviews across state agencies. The legislation passed with overwhelming legislative support, receiving unanimous House passage (93-0) and Senate passage (34-0) before final House concurrence (96-1).

What changed

HB5638 establishes a formal framework for West Virginia's cybersecurity program, codifying the authority of the state Chief Information Security Officer to conduct program reviews and ensuring consistent cybersecurity standards across all state agencies. The bill outlines specific responsibilities for agency compliance with cybersecurity requirements and establishes review processes.

State government agencies subject to this legislation must ensure their IT security programs align with the newly codified CISO requirements and participate in any required cybersecurity program reviews. Private sector entities providing technology services to West Virginia state government may face new contractual or compliance requirements as agencies implement the bill's provisions. The legislation represents a structural enhancement to state government cybersecurity governance.

What to do next

  1. State agencies must review and update cybersecurity programs to comply with new CISO requirements
  2. Government IT departments should monitor for implementing regulations from the state CISO
  3. Vendors providing services to West Virginia state agencies should assess alignment with new cybersecurity standards

Archived snapshot

Apr 8, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

ChangeBridge / West Virginia / HB5638 Signed by Governor HB5638 House Bill Signed by Governor 2026-03-14

Relating to the requirements of the state’s cyber security program and responsibilities and authority of the state chief information security officer

The purpose of this bill is to clarify the authority and responsibilities of the state chief information security officer and outline the process for cybersecurity program reviews.

Bill Details

State West Virginia

Session 2026 Regular Session

Chamber House

Official Source www.wvlegislature.gov/BillStatus/Billshi...

LegiScan View on LegiScan

Sponsors

Daniel Linville (Rep - R)

Action History

2026-04-01 H Approved by Governor 4/1/2026 2026-03-14 H Approved by Governor 4/1/2026 - House Journal 2026-03-14 S Approved by Governor 4/1/2026 - Senate Journal 2026-03-25 H To Governor 3/25/26 2026-03-14 S To Governor 3/25/2026 - Senate Journal 2026-03-14 S House Message received 2026-03-14 H Completed legislative action 2026-03-14 H Communicated to Senate 2026-03-14 H House concurred in Senate amendment and passed bill (Roll No. 644) 2026-03-14 H House received Senate message 2026-03-12 S Senate requests House to concur 2026-03-12 S Passed Senate (Roll No. 514) 2026-03-12 S Read 3rd time 2026-03-12 S On 3rd reading 2026-03-11 S Committee amendment adopted (Voice vote) 2026-03-11 S Read 2nd time 2026-03-11 S On 2nd reading 2026-03-10 S Read 1st time 2026-03-10 S Immediate consideration 2026-03-10 S Reported do pass, with amendment 2026-03-04 S To Government Organization 2026-03-04 S To Government Organization 2026-03-04 S Introduced in Senate 2026-03-02 H Communicated to Senate 2026-03-02 H Passed House (Roll No. 251) 2026-03-02 H Read 3rd time 2026-03-02 H On 3rd reading, Special Calendar 2026-02-27 H Read 2nd time 2026-02-27 H On 2nd reading, Special Calendar 2026-02-26 H Read 1st time 2026-02-26 H On 1st reading, Special Calendar 2026-02-25 H Do pass 2026-02-20 H Markup Discussion 2026-02-17 H To House Energy and Public Works 2026-02-17 H Introduced in House 2026-02-17 H To Energy and Public Works 2026-02-17 H Filed for introduction

Votes

2026-03-02 Passed House (Roll No. 251) Yea: 93 Nay: 0 2026-03-12 Passed Senate (Roll No. 514) Yea: 34 Nay: 0 2026-03-14 House concurred in Senate amendment and passed bill (Roll No. 644) Yea: 96 Nay: 1

Committee Referrals

2026-02-17 H Energy and Public Works 2026-03-04 S Government Organization

Amendments

2026-03-10 hb5638 s gov am _1 3-10 2026-03-10 hb5638 s gov am _1 3-10 adopted Adopted

Bill Text Versions

0000-00-00 Introduced 0000-00-00 Engrossed 0000-00-00 Enrolled Legislative data powered by LegiScan (CC BY 4.0)

Named provisions

Cybersecurity Program Requirements Chief Information Security Officer Authority Cybersecurity Program Reviews

Get daily alerts for West Virginia Legislative Events

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from WV Legislature.

What's AI-generated?

The plain-English summary, classification, and "what to do next" steps are AI-generated from the original text. Cite the source document, not the AI analysis.

Last updated

Classification

Agency
WV Legislature
Published
April 1st, 2026
Instrument
Rule
Legal weight
Binding
Stage
Final
Change scope
Substantive
Document ID
HB5638, 2026 Regular Session, West Virginia

Who this affects

Applies to
Government agencies
Industry sector
9211 Government & Public Administration
Activity scope
Cybersecurity program reviews State IT governance CISO oversight
Geographic scope
US-WV US-WV

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Data Privacy

Get alerts for this source

We'll email you when West Virginia Legislative Events publishes new changes.

Optional. Personalizes your daily digest.

Free. Unsubscribe anytime.