The committee shall:
(a) Adopt and enforce rules, regulations and policies that are necessary for the establishment, maintenance, upgrading and operation of the statewide criminal justice information system; and
(b) adopt rules and regulations that require entities connected to the Kansas criminal justice information system to report any cybersecurity incident to the Kansas bureau of investigation not later than 12 hours after the discovery of such cybersecurity incident.