Cyber Security Training

Texas Government Code Section 2054.5191 mandates cybersecurity training for local government employees, elected officials, and appointed officials who have access to a local government computer system or database and use a computer to perform at least 25 percent of their duties. The Texas Department of Information Resources (DIR) has certified that the Pool’s three training options below satisfy the requirements. 

The Pool's Three Training Options

1. Anyone who is required to take the training can watch this free, fun, informative, and short (19-minute) YouTube video and print a certificate of completion if they so desire. The video comes with an optional, self-administered test with answer key.
2. Anyone who is required to take the training can listen to the audio of the YouTube video in podcast format (Episode 9d of the “Local Officials: Stronger, Together Podcast”) and use the same certificate and test as in (1), above. 
3. Risk Pool Members can use training offered through the Pool’s Online Learning Center. This option includes a test that follows the training and allows the Member to assign and track completion.

Other DIR-certified training programs are listed on the agency’s website. 

Compliance Certification 

Tracking: A local government has two tracking options:

1. A local governmental entity can keep track of participants internally. The easiest and most common method for most entities is to simply keep a written list or use an Excel spreadsheet.
2. To assist a local governmental entity with tracking, DIR has developed an optional tracking tool, Texas by Texas (TxT). This method is probably most useful, for example, for a larger entity to track individual completion of hundreds of employees. Individual participants report completion to the TxT application, which sends a report to the entity showing who has completed the training. This method is not required and: (1) is merely designed to assist your entity with internal completion tracking; and (2) does not replace the requirement to report completion to DIR using the link below.

Mandatory Reporting: Once a local government entity’s required participants have completed the training, the entity must certify its compliance to DIR using the Cybersecurity Training Certification for State and Local Governments form by August 31 of each year. (The entity certifies compliance of all its required participants to DIR once per year — individuals do not certify compliance to DIR.)

Contact Ryan Burns — the Pool’s Cyber Risk Services Manager — at rburns@tmlirp.org or 512-491-3427 with any cyber-related questions.