Ind. Code ch. 10-16-22

in effect

Ind. Code § 10-16-22-1 Program established

Sec. 1. (a) The Indiana civilian cyber corps program is established as a subdivision of the Indiana guard reserve organized and maintained under IC 10-16-8 with the primary mission of increasing cybersecurity awareness, capability, and capacity throughout Indiana. The secondary mission of the civilian cyber corps is to provide rapid response capabilities for cybersecurity clients that would otherwise be unable to appropriately: (1) respond to; (2) mitigate; or (3) recover from; a cybersecurity incident. (b) The adjutant general shall administer the civilian cyber corps program. (c) The following state agencies shall designate a liaison to the civilian cyber corps: (1) The office of technology established by IC 4-13.1-2-1. (2) The department of homeland security established by IC 10-19-2-1. (3) The state police department. As added by P.L.94-2026, SEC.40.

Ind. Code § 10-16-22-2 Volunteer or adviser

Sec. 2. (a) The adjutant general may invite and appoint an individual who has expertise in addressing cybersecurity incidents to serve as a civilian cyber corps volunteer or civilian cyber corps adviser in a manner prescribed by the adjutant general. (b) The adjutant general shall require an individual who accepts an invitation to serve as a civilian cyber corps volunteer or civilian cyber corps adviser under subsection (a) to submit to a criminal history check. As added by P.L.94-2026, SEC.40.

Ind. Code § 10-16-22-3 Status of cyber corps volunteers and cyber corps advisers

Sec. 3. (a) A civilian cyber corps volunteer or civilian cyber corps adviser is not an agent, employee, or independent contractor of the state of Indiana for any purpose and has no authority to bind the state of Indiana with regard to third parties. (b) The state of Indiana is not liable to a civilian cyber corps volunteer or civilian cyber corps adviser for personal injury or property damage suffered by the civilian cyber corps volunteer or civilian cyber corps adviser through participation in the civilian cyber corps. As added by P.L.94-2026, SEC.40.

Ind. Code § 10-16-22-4 Immunity

Sec. 4. (a) The adjutant general, the military department, and the state of Indiana are immune from tort liability for acts or omissions by a civilian cyber corps volunteer or civilian cyber corps adviser as provided in this chapter. (b) A civilian cyber corps volunteer or civilian cyber corps adviser is subject to the same civil and criminal immunity protections as a member of the Indiana National Guard under IC 10-16-7-7(b) and IC 10-16-7-7(d) for any act done by the civilian cyber corps volunteer or civilian cyber corps adviser in the discharge of the civilian cyber corps volunteer's or civilian cyber corps adviser's official duty under this chapter. As added by P.L.94-2026, SEC.40.

Ind. Code § 10-16-22-5 Meeting and training requirements

Sec. 5. The civilian cyber corps shall conduct: (1) an annual meeting that meets at the call of the adjutant general; and (2) critical incident training or exercises at the call of the adjutant general. As added by P.L.94-2026, SEC.40.

Ind. Code § 10-16-22-6 Request for cybersecurity training; deployment

Sec. 6. (a) A cybersecurity client may request cybersecurity training by the civilian cyber corps by submitting a request to the civilian cyber corps in a manner prescribed by the adjutant general. (b) To initiate the deployment of a civilian cyber corps volunteer to provide training to a cybersecurity client, the adjutant general shall indicate in writing that the civilian cyber corps volunteer is authorized to provide training to the cybersecurity client. (c) The adjutant general may enter into a contract with a cybersecurity client as a condition of providing training to the cybersecurity client through the civilian cyber corps. (d) Acceptance by a cybersecurity client of training from a civilian cyber corps volunteer under this chapter must be made by the cybersecurity client in writing. (e) The adjutant general shall maintain a written document initiating the deployment of a civilian cyber corps volunteer to provide training to a cybersecurity client for: (1) six (6) years after the end of the deployment; or (2) the length of time required under the adjutant general's record retention policies; whichever is longer. As added by P.L.94-2026, SEC.40.

Ind. Code § 10-16-22-7 Notification of cybersecurity incident; authority of adjutant general

Sec. 7. (a) A cybersecurity client: (1) shall notify the state police department upon the occurrence of a cybersecurity incident before requesting response capabilities of the civilian cyber corps; and (2) may, upon recognition of a potential security vulnerability that could lead to a cybersecurity incident, request the adjutant general to deploy one (1) or more civilian cyber corps volunteers to provide rapid response assistance to the cybersecurity client. (b) The adjutant general may, at the adjutant general's discretion, initiate: (1) the deployment of a civilian cyber corps volunteer; or (2) the nondeployment of a civilian cyber corps adviser; upon recognition of a potential security vulnerability that could lead to a cybersecurity incident and at the request of the cybersecurity client. (c) To initiate the deployment of a civilian cyber corps volunteer to provide assistance to a cybersecurity client, the adjutant general shall indicate in writing that the civilian cyber corps volunteer is authorized to provide assistance to the cybersecurity client. A single written document may initiate the deployment of more than one (1) civilian cyber corps volunteer. (d) The adjutant general may enter into a contract with a cybersecurity client as a condition of providing assistance to the cybersecurity client through the civilian cyber corps. (e) Acceptance by a cybersecurity client of assistance from a civilian cyber corps volunteer under this chapter shall be made by the cybersecurity client in writing. (f) The adjutant general shall maintain a written document initiating the deployment of a civilian cyber corps volunteer to provide assistance to a cybersecurity client for: (1) six (6) years after the end of the deployment; or (2) the length of time required under the adjutant general's record retention policies; whichever is longer. (g) At the discretion of the adjutant general, the deployment of a civilian cyber corps volunteer may be extended in writing in the same manner as the initial deployment. As added by P.L.94-2026, SEC.40.

Ind. Code § 10-16-22-8 Requirement to publish guidelines

Sec. 8. (a) The adjutant general shall publish guidelines for the operation of the civilian cyber corps program. At a minimum, the published guidelines must include the following: (1) An explanation of the standards the adjutant general will use to determine whether an individual may serve as a civilian cyber corps volunteer or civilian cyber corps adviser and an explanation of the process by which an individual may become a civilian cyber corps volunteer or civilian cyber corps adviser. (2) An explanation of the requirements the adjutant general will impose when a cybersecurity client requests and receives the assistance of the civilian cyber corps. (3) An explanation of the process by which the civilian cyber corps will select and prioritize cybersecurity clients requesting assistance. (b) The adjutant general may provide, or contract for the provision of, appropriate training to members of the civilian cyber corps. (c) The military department may provide compensation for actual and necessary travel and subsistence expenses incurred by a civilian cyber corps volunteer on a deployment. (d) The adjutant general may establish a fee schedule for assistance provided by the civilian cyber corps. As added by P.L.94-2026, SEC.40.

Ind. Code § 10-16-22-9 Confidentiality requirements

Sec. 9. (a) Information that is voluntarily given to the civilian cyber corps or obtained under this chapter that would identify or provide as a means of identifying a person or cybersecurity client, and the disclosure of which may: (1) cause the person or cybersecurity client to become a victim of a cybersecurity incident; or (2) disclose a person's or cybersecurity client's cybersecurity plans or cybersecurity related practices, procedures, methods, results, organizational information system infrastructure, hardware, or software; is confidential and exempt from disclosure under IC 5-14-3-4. (b) The work product of a civilian cyber corps volunteer or civilian cyber corps adviser under this chapter is confidential and exempt from disclosure under IC 5-14-3-4. As added by P.L.94-2026, SEC.40.

Source: Open US Law by Vaquill AI (CC BY 4.0)URL: https://iga.in.gov/laws/2026/ic/titles/10Fetched: 10/17/2026