Free Resource
Texas TXCC FY 2026-2027 Compliance Checklist
A practical, plain-English checklist of the cybersecurity awareness training requirements Texas organizations must meet under HB 150 and the TXCC FY 2026-2027 certification standards. Work through each section to confirm your program is audit-ready.
Program & Certification
- Use a training program certified by the Texas Cyber Command (TXCC) for FY 2026-2027.
- Confirm the program maps to Texas Government Code §§ 2063.102, 2063.103, and 2063.12.
- Ensure training covers employees, officials, and contractors — not employees alone.
- Verify the program issues verifiable, tamper-evident completion certificates.
Core Required Topics
- Information security fundamentals and safeguarding information and systems.
- Threat awareness: phishing, spear phishing, quishing, and social engineering.
- Business Email Compromise (BEC): forced urgency, unnatural text, unverifiable details.
- Identifying, responding to, and reporting suspected incidents.
Foreign Adversary Requirements
- Foreign adversary influence operations and threat awareness.
- UFWD (United Front Work Department) tactics and methods.
- Resources on UFWD activity in Texas.
- Reporting suspected foreign adversary contact to the Texas Ethics Commission.
- § 572.070 restrictions — no prohibited foreign travel, gifts, or lodging.
- The 30-day reporting requirement for covered relationships.
- Felony-level consequences for violations.
Completion & Recordkeeping
- Achieve a minimum 70% passing score on all knowledge-check quizzes.
- Train all covered personnel before the August 31 fiscal-year deadline.
- Retain completion records and certificates for audit (7-year retention).
- Maintain a roster showing who has and has not completed training.
- Keep compliance reports ready for TXCC or internal audit review.
Check every box — automatically
EncryptedTechnology's TXCC-certified training covers every item on this list, tracks completion for you, and issues audit-ready certificates. Get your team compliant in hours, not weeks.
This checklist is provided for informational purposes and does not constitute legal advice.