(a) The command shall develop a plan to address cybersecurity risks and incidents in this state. The command may enter into an agreement with a national organization, including the National Cybersecurity Preparedness Consortium, to support the command's efforts in implementing the components of the plan for which the command lacks resources to address internally. The agreement may include provisions for:
(1) providing technical assistance services to support preparedness for and response to cybersecurity risks and incidents;
(2) conducting cybersecurity simulation exercises for state agencies to encourage coordination in defending against and responding to cybersecurity risks and incidents;
(3) assisting state agencies in developing cybersecurity information-sharing programs to disseminate information related to cybersecurity risks and incidents; and
(4) incorporating cybersecurity risk and incident prevention and response methods into existing state emergency plans, including continuity of operation plans and incident response plans.
(b) In implementing the provisions of the agreement prescribed by Subsection (a), the command shall seek to prevent unnecessary duplication of existing programs or efforts of the command or another state agency.
(c) The command shall consult with institutions of higher education in this state when appropriate based on an institution's expertise in addressing specific cybersecurity risks and incidents.