Statute · California Government Code

Cal. Gov't Code § 8592.35 — Cybersecurity

Cal. Gov't Code § 8592.35

Type
Statute
Source
California Government Code
Jurisdiction
California
Date
2018-01-01
Current through
Nov 2, 2026 (California Legislative Counsel)

(a) (1) On or before July 1, 2018, the department shall, in consultation with the office and compliance with Section 11549.3, update the Technology Recovery Plan element of the State Administrative Manual to ensure the inclusion of cybersecurity strategy incident response standards for each…

Citator

Cal. Gov't Code § 8592.35 — Cybersecurity is in force in the current edition of the Code, and nothing recorded condemns it.

(a) (1) On or before July 1, 2018, the department shall, in consultation with the office and compliance with Section 11549.3, update the Technology Recovery Plan element of the State Administrative Manual to ensure the inclusion of cybersecurity strategy incident response standards for each state agency to secure its critical infrastructure controls and critical infrastructure information.

(2) In updating the standards in paragraph (1), the department shall consider, but not be limited to considering, all of the following:

(A) Costs to implement the standards.

(B) Security of critical infrastructure information.

(C) Centralized management of risk.

(D) Industry best practices.

(E) Continuity of operations.

(F) Protection of personal information.

(b) Each state agency shall provide the department with a copy of its updated Technology Recovery Plan.

(c) Each state agency shall, as part of its Technology Recovery Plan, provide the department with an inventory of all critical infrastructure controls, and their associated assets, in the possession of the agency.