A new law could save the state up to $9 million through greater awareness of malicious and costly cybersecurity attacks.