(a) The department periodically shall analyze the training needs of information resources managers and adjust its initial training and continuing education guidelines based on its analyses. The department’s analyses must take into account the different training needs of information resources managers at both large and small state agencies.
(b) The department shall provide mandatory guidelines to state agencies regarding the initial and continuing education requirements needed for information resources managers and require information resources managers to report their compliance with the requirements to the department.

(b-1) The department shall provide mandatory guidelines to state agencies regarding the continuing education requirements for cybersecurity training that must be completed by all information resources employees of the agencies. The department shall consult with the Information Technology Council for Higher Education on applying the guidelines to institutions of higher education.
(c) The department’s initial training and continuing education guidelines must require information resources managers to receive training and continuing education in:
(1) implementing quality assurance programs;
(2) training the people who use the agency’s information resources and information resources technologies; and
(3) balancing the technical aspects of information resources and information resources technologies with the agency’s business needs.
(d) An individual who is appointed the information resources manager of a state agency before September 1, 1992, is exempt from the requirements of the department regarding initial education needed for that position.
(e) The department may provide educational materials and seminars for state agencies and information resources managers.