(a) In this section, "contractor" includes a subcontractor, officer, or employee of the contractor.
(b) A state agency shall require any contractor who has access to a state computer system or database to complete a cybersecurity training program certified under Section 2063.102 as selected by the agency.
(c) The cybersecurity training program must be completed by a contractor during the term of the contract and during any renewal period.
(d) Required completion of a cybersecurity training program must be included in the terms of a contract awarded by a state agency to a contractor.
(e) A contractor required to complete a cybersecurity training program under this section shall verify completion of the program to the contracting state agency. The person who oversees contract management for the agency shall:
(1) not later than August 31 of each year, report the contractor's completion to the command; and
(2) periodically review agency contracts to ensure compliance with this section.