Office to prepare and update statewide strategic plan regarding security of information systems; use of information by private entity; state agencies with cybersecurity policy required to test adherence to policy by employees and submit results to Office.