Commonwealth information security; definitions, requirements.

Commonwealth information security requirements. Requires state public bodies, defined in the bill, to (i) complywith the Commonwealth's security policies and standards, (ii) ensureeach of its employees completes information security training, (iii)conduct regular security audits, and (iv) report the results of suchaudits to the appropriate entity. The bill directs the Chief InformationOfficer of the Commonwealth to (a) publish and maintain a list ofthe Commonwealth's security policies and standards with which statepublic bodies are required to comply, (b) ensure that transitionmeetings with state public bodies occur, and (c) document such transitionsand any exemptions from the requirements of the bill.