IC 4-13.1-4-6: Submission of cybersecurity policy and assessment to office of technology

Sec. 6. (a) Not later than December 31 of each odd-numbered year, a public entity shall submit to the office the public entity's cybersecurity policy adopted by the public entity under section 5 of this chapter.

(b) The office shall establish a procedure for collecting and maintaining a record of cybersecurity policies submitted to the office under subsection (a).

(c) If a public entity engages a third party to conduct an assessment of the public entity's cybersecurity policy, the public entity shall provide the results of the assessment to the office.