Alabama Critical Infrastructure Cybersecurity and Technology Security Act

This bill establishes statewide cybersecurity and technology-security standards for publicly owned utilities, ports, water systems, transportation systems, and local governments that operate critical infrastructure. The Alabama Department of Information Technology shall issue risk-based baseline standards, provide voluntary technical assistance and incident-response coordination, and administer competitive grants to help eligible operators assess vulnerabilities, improve network monitoring, train personnel, and recover from cyberattacks. Standards shall be phased in according to the size and risk of each operator, with reasonable exemptions for documented hardship and no requirement to disclose sensitive security information publicly.