As used in the Cybersecurity Act:

A. “agency” means executive cabinet agencies and their administratively attached agencies, offices, boards and commissions;

B. “cybersecurity” means acts, practices or systems that eliminate or reduce the risk of loss of critical assets, loss of sensitive information or reputational harm as a result of a cyber attack or breach within an organization’s network;

C. “information security” means acts, practices or systems that eliminate or reduce the risk that legally protected information or information that could be used to facilitate criminal activity is accessed or compromised through physical or electronic means;

D. “information technology” means computer hardware, storage media, networking equipment, physical devices, infrastructure, processes and code, firmware, software and ancillary products and services, including:

(1)     systems design and analysis;

(2)     development or modification of hardware or solutions used to create, process, store, secure or exchange electronic data;

(3)     information storage and retrieval;

(4)     voice, radio, video and data communications;

(5)     network, hosting and cloud-based systems; (6)     simulation and testing;

(7)     interactions between a user and an information system; and

(8)     user and system credentials; and

E. “security officer” means the state chief information security officer.