(Boston – 07/20/2021) Senator Moore today delivered testimony before the Joint Committee on State Administration and Regulatory Oversight in support of his bill S.2088, an Act establishing a cybersecurity control and review commission.
“Over the past eighteen months, we have a seen a huge shift in how we all operate in both our personal and professional lives,” said Senator Moore (D-Millbury). “We all find ourselves online more and more, and many of us have come to enjoy the benefits of carrying out daily routines from home. However, we must take steps to secure our information technology infrastructures, as cyberattacks are both an ever-growing threat to the Commonwealth and the country.”
In his testimony, Senator Moore highlighted several instances of cyberattacks that have occurred in the Commonwealth over the past few months. Earlier this spring, no one in the state was able to complete their vehicle inspection process due to a malware attack on the vendor who tracks these inspections. And just a few weeks ago, the Massachusetts Steamship Authority suffered a ransomware attack that put a halt to the booking process for those trying to commute to and from Nantucket and Martha’s Vineyard.
Senator Moore emphasized that while these incidents were resolved, there is nothing to suggest that the Commonwealth is immune to a much more detrimental cyberattack. For instance, the Senator brought up the example of a hacker attempting to raise the levels of sodium hydroxide to a potentially fatal amount at a water treatment plant in Florida. This attack was thankfully thwarted but demonstrates just how big a danger that cyberattacks present.
Senator Moore therefore advocated that his bill be favorably reported out of committee, as it would establish an expert commission to recommend cybersecurity standards for public agencies and private companies that contract with the Commonwealth. These standards would be based on best practices set forth by the National Institute of Standards and Technology Cybersecurity Framework. The commission would also work with private businesses that have a demonstrated track record of adhering to strong cybersecurity standards.
After giving his testimony, the Joint Committee on State Administration and Regulatory Oversight will now recommend whether or not the bill should continue through the legislative process. The progress of the bill can be followed along here: https://malegislature.gov/Bills/192/S2088
###