INFORMATION TECHNOLOGY SERVICES – Amends and adds to existing law to require the implementation of cybersecurity best practices and the use of multifactor identification in Idaho state government.

Idaho's H 35 requires all state agencies, including departments and institutions of higher education, to implement cybersecurity best practices and use two-step login verification (multifactor identification) for accessing government IT systems. This includes securing email, cloud storage, databases, and networks for all state employees. The law also specifically mandates the legislative branch, judicial branch, and elected constitutional officers to adopt the same security measures for their staff. The bill takes effect on July 1, 2025, and defines "multifactor identification" as requiring two different verification methods, such as a password plus a security token or biometric scan.