An Act amending Title 71 (State Government) of the Pennsylvania Consolidated Statutes, in boards and offices, providing for information technology and security.

SB 373 establishes new statewide cybersecurity standards for Pennsylvania state agencies' information technology systems. It requires agencies to obtain "authorization to operate" for all IT systems using public funds, conduct annual security reviews, and perform risk assessments - including penetration testing - to identify vulnerabilities. The bill mandates biannual compliance checks of vendors and creates a Joint Cybersecurity Oversight Committee to monitor implementation. These requirements directly affect all state agencies and their IT vendors, focusing on proactive security management rather than reactive measures.