Sec. 10.
(1) After consultation with the advisory board, the chief information officer shall do both of the following:
(a) Approve the set of tools that the Michigan cyber civilian corps may use in response to a cybersecurity incident.
(b) Determine the standards of expertise necessary for an individual to become a member of the Michigan cyber civilian corps.
(2) After consultation with the advisory board, the department shall publish guidelines for the operation of the Michigan cyber civilian corps program. At a minimum, the published guidelines must include the following:
(a) An explanation of the standard the department will use to determine whether an individual may serve as a Michigan cyber civilian corps volunteer and an explanation of the process by which an individual may become a Michigan cyber civilian corps volunteer.
(b) An explanation of the requirements the department will impose for a client to receive the assistance of the Michigan cyber civilian corps and an explanation of the process by which a client may request and receive the assistance of the Michigan cyber civilian corps.
(3) The department may enter into contracts with clients as a condition to providing assistance through the Michigan cyber civilian corps.
(4) The department may provide appropriate training to individuals who wish to participate in the Michigan cyber civilian corps and to existing Michigan cyber civilian corps volunteers.
(5) The department may provide compensation for actual and necessary travel and subsistence expenses incurred by Michigan cyber civilian corps volunteers on a deployment at the discretion of the department.
(6) The department may establish a fee schedule for clients that wish to use the assistance of the Michigan cyber civilian corps. The department may recoup expenses through the fees but may not generate a profit.
(7) Information voluntarily given to the Michigan cyber command center or obtained under this act that would identify or provide a means of identifying a person that may, as a result of disclosure of the information, become a victim of a cybersecurity incident or that would disclose a person's cybersecurity plans or cybersecurity-related practices, procedures, methods, results, organizational information system infrastructure, hardware, or software is exempt from disclosure under the freedom of information act, 1976 PA 442, MCL 15.231 to 15.246.
History: 2017, Act 132, Eff. Jan. 24, 2018
Copyright ©2024 LegalFix. All rights reserved. LegalFix is not a law firm, is not licensed to practice law, and does not provide legal advice, services, or representation. The information on this website is an overview of the legal plans you can purchase—or that may be provided by your employer as an employee benefit or by your credit union or other membership group as a membership benefit.
LegalFix provides its members with easy access to affordable legal services through a network of independent law firms. LegalFix, its corporate entity, and its officers, directors, employees, agents, and contractors do not provide legal advice, services, or representation—directly or indirectly.
The articles and information on the site are not legal advice and should not be relied upon—they are for information purposes only. You should become a LegalFix member to get legal services from one of our network law firms.
You should not disclose confidential or potentially incriminating information to LegalFix—you should only communicate such information to your network law firm.
The benefits and legal services described in the LegalFix legal plans are not always available in all states or with all plans. See the legal plan Benefit Overview and the more comprehensive legal plan contract during checkout for coverage details in your state.
Use of this website, the purchase of legal plans, and access to the LegalFix networks of law firms are subject to the LegalFix Terms of Service and Privacy Policy.