Agencies, boards & commissions

Cybersecurity training for Texas state agencies

Meet the annual training requirement for every employee and appointed official, including the foreign adversary rules in Section 572.070. Track divisions from one dashboard and give your information security officer audit-ready proof in one click.

  • TXCC-certified, FY 2026-2027
  • About 60 minutes
  • QR-verified certificates
  • One-click compliance report
The requirement

What Texas law asks of state agencies

State agencies have trained employees in cybersecurity every year since House Bill 3834. The requirement now sits in Texas Government Code Chapter 2063, administered by the Texas Cyber Command (TXCC), with agencies tracking completion each fiscal year.

Who must train

Employees who use a computer for at least 25% of their duties, plus elected and appointed officials such as board and commission members.

A certified program

Training must be a state-certified program. This course is TXCC-certified for fiscal year 2026-2027 under Section 2063.102.

Every fiscal year

Completion is tracked by the state fiscal year, September 1 through August 31, and renews annually.

Foreign adversary rules

Section 572.070 prohibits accepting gifts, transportation, or lodging from foreign adversary sources and requires reporting contacts to the Texas Ethics Commission within 30 days. Modules 3 and 4 cover it in depth.

This page summarizes common obligations under Texas Government Code Chapter 2063 and Section 572.070. Confirm the requirements for specific positions with your legal counsel.

Who takes the course

Everyone at your agency

Appointed officials

Board and commission members complete a concise course and appear in the same compliance report.

Program staff

Caseworkers, analysts, and program staff who handle confidential and regulated information daily.

Finance and procurement

Accounting and purchasing staff, the prime targets of business email compromise.

Regional and field offices

Staff across the state finish on any device, tracked by office or division.

Contractors

Enroll contractors with access to agency systems and keep their certificates on file with your own staff.

IT and security teams

An optional IT track covers backups, privileged accounts, Traffic Light Protocol, and third-party risk.

Live demo · no sign-up

See the dashboard your ISO and HR would use

Open the real admin portal, loaded with a sample district of 29 staff at every stage of training. Click anything. It's exactly what your agency gets on day one.

  • Live completion dashboard with a deadline countdown
  • Roster with progress, scores, and one-click reminders
  • Every certificate, printable as one PDF
  • An audit-ready compliance report in one click
Open the live demo

Takes one click. Prefer a tour? Read the illustrated user guide.

Why it works

Built for agency compliance programs

Foreign adversary coverage

Two full modules on influence operations, the United Front Work Department, and Section 572.070 reporting.

Audit-ready evidence

A compliance report with every person, completion date, score, and verifiable certificate number.

Division reporting

Tag people by division or office and see completion for each at a glance.

Shared administration

Invite HR, the ISO, and division leads as co-admins, with a full activity log.

Accessible by design

Meets WCAG 2.2 guidelines, with video, audio, podcast, slides, and text for every lesson.

Simple procurement

Pay by card, or request an invoice against a purchase order. Evolve AI Institute is a registered Texas CMBL vendor.

What your team learns

Four focused modules, about an hour

  1. 1Principles and Safeguarding InformationTypes of information, security controls, multi-factor authentication, remote work, and safe use of generative AI.
  2. 2Threats, Attacks, and ReportingPhishing, quishing, business email compromise, ransomware, and how to report suspicious activity.
  3. 3Foreign Adversary Influence OperationsHow influence operations target Texas government and where to report them.
  4. 4Foreign Adversary Interaction RestrictionsThe Section 572.070 rules on gifts and travel and the 30-day reporting requirement.
  5. +Optional IT Roles TrackCyber hygiene, backups, Traffic Light Protocol, AI attacks, third-party risk, and privileged accounts.
A lesson on QR code phishing with video, audio, podcast, slides, and written content

Every lesson offers video, podcast, audio, slides, and text, plus six hands-on practice scenarios.

Getting started

Up and running in a day

  1. Get your seats

    Buy online with a card, or request an invoice against a purchase order.

  2. Receive admin access

    Your coordinator gets a link straight into your agency's portal.

  3. Invite your people

    Upload a spreadsheet or share a sign-up link. Invitations go out automatically.

  4. Download your proof

    Track progress, send reminders, and export certificates and the compliance report.

Pricing

Per-person pricing with volume savings

Every seat includes the full course, practice scenarios, the certificate, and organization reporting.

Example: An agency with 220 employees and board members with 220 people on the Agency plan: $2,189.00 total.

Individual

$19.95
per person
Enroll now

Team

$14.95
per seat · 2-50 people · includes the admin portal
Buy team seats

Agency

$9.95
per seat · 51-500 people · includes the admin portal
Buy agency seats

More than 500 people, or paying by purchase order? Request a quote or email [email protected].

Questions

State agencies: frequently asked questions

Which state agency employees must complete cybersecurity training?
Employees who use a computer for at least 25% of their duties, plus elected and appointed officials, complete a state-certified cybersecurity training program each fiscal year.
Does the course cover Texas Government Code Section 572.070?
Yes. Module 4 covers the restrictions on accepting gifts, transportation, and lodging from foreign adversary sources and the 30-day reporting requirement to the Texas Ethics Commission. Module 3 covers foreign adversary influence operations.
Is this program certified for fiscal year 2026-2027?
Yes. The Texas Cyber Command certified this program for FY 2026-2027 under Texas Government Code Section 2063.102.
Can we include contractors?
Yes. Enroll contractors with access to agency systems alongside employees, and their certificates appear in your reports.
How do we document completion for an audit?
Download the compliance report as a PDF or CSV. Every certificate carries a unique number and QR code that auditors can verify independently online.
How does procurement work?
Buy seats online by card, or email [email protected] for an invoice against your purchase order. Agencies with more than 500 people can request a custom quote.

Get your agency trained ahead of the deadline

See the admin portal with real data in one click, then choose the plan that fits your agency.