(a) Confidential network security information may be released only to officials responsible for the network, law enforcement, the state auditor's office, and agency or elected officials designated by the command.
(b) Network security information is confidential under this section if the information is:
(1) related to passwords, personal identification numbers, access codes, encryption, or other components of the security system of a governmental entity;
(2) collected, assembled, or maintained by or for a governmental entity to prevent, detect, or investigate criminal activity; or
(3) related to an assessment, made by or for a governmental entity or maintained by a governmental entity, of the vulnerability of a network to criminal activity.