On or before November 30, the commission shall report to the Public Utilities, Energy, and Technology Interim Committee:
(1) an assessment of cyber threats to Utah;
(2) recommendations for legislation that would reduce the state's vulnerability to attack; and
(3) recommendations for best practices for state government with respect to cybersecurity.