(a) On or before December 31 of each year, and when requested by the Legislature, the Cybersecurity Office shall provide a report to the Joint Committee on Government and Finance containing the number and nature of incidents reported to it during the preceding calendar year. The report shall be transmitted to the members of the committee electronically and shall be sent to the legislative librarian to be posted on the legislative website. No hard copy of the report shall be issued; however, a member shall be provided a hard copy upon request.
(b) The Cybersecurity Office shall also make recommendations, if any, on security standards or mitigation that should be adopted.