Bill Text

PDF |Add To My Favorites |Track Bill | print page

AB-531 Office of Information Security: information security technologies.(2017-2018)

SHARE THIS:share this bill in Facebookshare this bill in Twitter
Date Published: 09/15/2017 09:00 PM
AB531:v96#DOCUMENT

Enrolled  September 15, 2017
Passed  IN  Senate  September 11, 2017
Passed  IN  Assembly  September 13, 2017
Amended  IN  Senate  September 06, 2017
Amended  IN  Assembly  April 20, 2017

CALIFORNIA LEGISLATURE— 2017–2018 REGULAR SESSION

Assembly Bill No. 531


Introduced by Assembly Member Irwin

February 13, 2017


An act to add Section 11549.2 to the Government Code, relating to information security.


LEGISLATIVE COUNSEL'S DIGEST


AB 531, Irwin. Office of Information Security: information security technologies.
Existing law establishes the Office of Information Security within the Department of Technology, under the supervision of the Chief of the Office of Information Security, and requires the chief to establish an information security program. Existing law authorizes the office to conduct, or require to be conducted, an independent security assessment of any state agency, department, or office, the cost of which is to be funded by the state agency, department, or office being assessed.
This bill would require the office, on or before July 1, 2019, to review information security technologies currently in place in state agencies to determine if there are sufficient policies, standards, and procedures in place to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content, as defined, inside or outside the firewall of state agencies. The bill would require the office, following the review, to develop a statewide plan to require the implementation by state agencies, during the next fiscal year, of any information security technology the office determines to be necessary to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content of a state agency.
Vote: MAJORITY   Appropriation: NO   Fiscal Committee: YES   Local Program: NO  

The people of the State of California do enact as follows:


SECTION 1.

 Section 11549.2 is added to the Government Code, to read:

11549.2.
 (a) In addition to the information security program responsibilities established in Section 11549.3, on or before July 1, 2019, the office shall review information security technologies currently in place in state agencies to determine if there are sufficient policies, standards, and procedures in place to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content inside or outside the firewall of state agencies.
(b) Following the review pursuant to subdivision (a), the office shall develop a statewide plan to require the implementation by state agencies, during the next fiscal year, of any information security technology the office determines to be necessary to protect critical government information and prevent the compromise or unauthorized disclosure of the sensitive digital content of a state agency.
(c) Nothing in this section shall be construed to affect the application of the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1).
(d) For purposes of this section, “digital content” may include, but is not limited to, any of the following:
(1) Common desktop applications, including word processing, presentations, and spreadsheets.
(2) Portable document format (PDF).
(3) Computer-aided design.
(4) Photographs.
(5) Videos.