The Joint Standing Committee on the Judiciary of the West Virginia Legislature convened on February 10, 2025, to address pressing issues surrounding cybersecurity and the establishment of a new resource center aimed at enhancing the state's defenses against cyber threats.
During the meeting, cybersecurity was highlighted as a significant and escalating threat to both citizens and businesses in West Virginia. The estimated annual cost of cybercrime has surged from $105 billion in 2020 to a projected $1.8 trillion by 2028. The average cost of a data breach was reported to be nearly $4.9 million as of February 2024, underscoring the urgent need for proactive measures.
A key proposal discussed was the introduction of a cybersecurity safe harbor law, which would incentivize businesses to adopt industry-recognized protocols for protecting sensitive data. This law would position West Virginia as the sixth state to implement such legislation, joining Ohio, Utah, Iowa, Tennessee, and Connecticut. The proposed law aims to encourage businesses to invest in cybersecurity measures before incidents occur, rather than reacting after a breach.
In addition to the safe harbor law, the committee introduced the Cybersecurity Resilience Resource Center (CRRC), funded by a $1.5 million grant from the Appalachian Regional Commission. This center will provide free assistance to businesses across all 55 counties in West Virginia, focusing particularly on small and medium-sized enterprises that may lack the resources to implement comprehensive cybersecurity frameworks. The CRRC will leverage expertise from West Virginia University faculty and students, as well as professionals from the public and private sectors.
The initiative aims not only to protect businesses and consumers from cyber threats but also to enhance workforce development by providing students with hands-on experience in cybersecurity. More than 200 students are expected to participate in this program, gaining valuable skills that will make them more competitive in the job market.
The discussions at the meeting emphasized the importance of proactive cybersecurity measures and the need for collaborative efforts to safeguard West Virginia's digital landscape. The proposed legislation and the establishment of the CRRC represent significant steps toward making the state a national leader in cybersecurity training and services.