Bill Text: CA AB531 | 2017-2018 | Regular Session | Enrolled
Bill Title: Office of Information Security: information security technologies.
Spectrum: Partisan Bill (Democrat 1-0)
Status: (Vetoed) 2018-01-12 - Stricken from file. [AB531 Detail]
Download: California-2017-AB531-Enrolled.html
|
Enrolled
September 15, 2017 |
|
Passed
IN
Senate
September 11, 2017 |
|
Passed
IN
Assembly
September 13, 2017 |
|
Amended
IN
Senate
September 06, 2017 |
|
Amended
IN
Assembly
April 20, 2017 |
CALIFORNIA LEGISLATURE—
2017–2018 REGULAR SESSION
| Assembly Bill | No. 531 |
| Introduced by Assembly Member Irwin |
February 13, 2017 |
An act to add Section 11549.2 to the Government Code, relating to information security.
LEGISLATIVE COUNSEL'S DIGEST
AB 531, Irwin.
Office of Information Security: information security technologies.
Existing law establishes the Office of Information Security within the Department of Technology, under the supervision of the Chief of the Office of Information Security, and requires the chief to establish an information security program. Existing law authorizes the office to conduct, or require to be conducted, an independent security assessment of any state agency, department, or office, the cost of which is to be funded by the state agency, department, or office being assessed.
This bill would require the office, on or before July 1, 2019, to review information security technologies currently in place in state agencies to determine if there
are sufficient policies, standards, and procedures in place to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content, as defined, inside or outside the firewall of state agencies. The bill would require the office, following the review, to develop a statewide plan to require the implementation by state agencies, during the next fiscal year, of any information security technology the office determines to be necessary to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content of a state agency.
Digest Key
Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NOBill Text
The people of the State of California do enact as follows:
SECTION 1.
Section 11549.2 is added to the Government Code, to read:11549.2.
(a) In addition to the information security program responsibilities established in Section 11549.3, on or before July 1, 2019, the office shall review information security technologies currently in place in state agencies to determine if there are sufficient policies, standards, and procedures in place to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content inside or outside the firewall of state agencies.(b) Following the review pursuant to subdivision (a), the office shall develop a statewide plan to require the implementation by state agencies, during the next fiscal year, of any information security technology the office determines to be necessary to protect critical government information and prevent the compromise or unauthorized disclosure of the sensitive digital content of a state agency.
(c) Nothing in this section shall be construed to affect the application of the California
Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1).
(d) For purposes of this section, “digital content” may include, but is not limited to, any of the following:
(1) Common desktop applications, including word processing, presentations, and spreadsheets.
(2) Portable document format (PDF).
(3) Computer-aided
design.
(4) Photographs.
(5) Videos.
