Enrolled September 15, 2017 Passed IN Senate September 11, 2017 Passed IN Assembly September 13, 2017 Amended IN Senate September 06, 2017 Amended IN Assembly April 20, 2017 CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION Assembly Bill No. 531Introduced by Assembly Member IrwinFebruary 13, 2017 An act to add Section 11549.2 to the Government Code, relating to information security. LEGISLATIVE COUNSEL'S DIGESTAB 531, Irwin. Office of Information Security: information security technologies.Existing law establishes the Office of Information Security within the Department of Technology, under the supervision of the Chief of the Office of Information Security, and requires the chief to establish an information security program. Existing law authorizes the office to conduct, or require to be conducted, an independent security assessment of any state agency, department, or office, the cost of which is to be funded by the state agency, department, or office being assessed.This bill would require the office, on or before July 1, 2019, to review information security technologies currently in place in state agencies to determine if there are sufficient policies, standards, and procedures in place to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content, as defined, inside or outside the firewall of state agencies. The bill would require the office, following the review, to develop a statewide plan to require the implementation by state agencies, during the next fiscal year, of any information security technology the office determines to be necessary to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content of a state agency.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NO Bill TextThe people of the State of California do enact as follows:SECTION 1. Section 11549.2 is added to the Government Code, to read:11549.2. (a) In addition to the information security program responsibilities established in Section 11549.3, on or before July 1, 2019, the office shall review information security technologies currently in place in state agencies to determine if there are sufficient policies, standards, and procedures in place to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content inside or outside the firewall of state agencies.(b) Following the review pursuant to subdivision (a), the office shall develop a statewide plan to require the implementation by state agencies, during the next fiscal year, of any information security technology the office determines to be necessary to protect critical government information and prevent the compromise or unauthorized disclosure of the sensitive digital content of a state agency.(c) Nothing in this section shall be construed to affect the application of the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1).(d) For purposes of this section, digital content may include, but is not limited to, any of the following:(1) Common desktop applications, including word processing, presentations, and spreadsheets.(2) Portable document format (PDF).(3) Computer-aided design.(4) Photographs.(5) Videos.
Enrolled September 15, 2017 Passed IN Senate September 11, 2017 Passed IN Assembly September 13, 2017 Amended IN Senate September 06, 2017 Amended IN Assembly April 20, 2017 CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION Assembly Bill No. 531Introduced by Assembly Member IrwinFebruary 13, 2017 An act to add Section 11549.2 to the Government Code, relating to information security. LEGISLATIVE COUNSEL'S DIGESTAB 531, Irwin. Office of Information Security: information security technologies.Existing law establishes the Office of Information Security within the Department of Technology, under the supervision of the Chief of the Office of Information Security, and requires the chief to establish an information security program. Existing law authorizes the office to conduct, or require to be conducted, an independent security assessment of any state agency, department, or office, the cost of which is to be funded by the state agency, department, or office being assessed.This bill would require the office, on or before July 1, 2019, to review information security technologies currently in place in state agencies to determine if there are sufficient policies, standards, and procedures in place to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content, as defined, inside or outside the firewall of state agencies. The bill would require the office, following the review, to develop a statewide plan to require the implementation by state agencies, during the next fiscal year, of any information security technology the office determines to be necessary to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content of a state agency.Digest Key Vote: MAJORITY Appropriation: NO Fiscal Committee: YES Local Program: NO
Enrolled September 15, 2017 Passed IN Senate September 11, 2017 Passed IN Assembly September 13, 2017 Amended IN Senate September 06, 2017 Amended IN Assembly April 20, 2017
Enrolled September 15, 2017
Passed IN Senate September 11, 2017
Passed IN Assembly September 13, 2017
Amended IN Senate September 06, 2017
Amended IN Assembly April 20, 2017
CALIFORNIA LEGISLATURE 20172018 REGULAR SESSION
Assembly Bill No. 531
Introduced by Assembly Member IrwinFebruary 13, 2017
Introduced by Assembly Member Irwin
February 13, 2017
An act to add Section 11549.2 to the Government Code, relating to information security.
LEGISLATIVE COUNSEL'S DIGEST
## LEGISLATIVE COUNSEL'S DIGEST
AB 531, Irwin. Office of Information Security: information security technologies.
Existing law establishes the Office of Information Security within the Department of Technology, under the supervision of the Chief of the Office of Information Security, and requires the chief to establish an information security program. Existing law authorizes the office to conduct, or require to be conducted, an independent security assessment of any state agency, department, or office, the cost of which is to be funded by the state agency, department, or office being assessed.This bill would require the office, on or before July 1, 2019, to review information security technologies currently in place in state agencies to determine if there are sufficient policies, standards, and procedures in place to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content, as defined, inside or outside the firewall of state agencies. The bill would require the office, following the review, to develop a statewide plan to require the implementation by state agencies, during the next fiscal year, of any information security technology the office determines to be necessary to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content of a state agency.
Existing law establishes the Office of Information Security within the Department of Technology, under the supervision of the Chief of the Office of Information Security, and requires the chief to establish an information security program. Existing law authorizes the office to conduct, or require to be conducted, an independent security assessment of any state agency, department, or office, the cost of which is to be funded by the state agency, department, or office being assessed.
This bill would require the office, on or before July 1, 2019, to review information security technologies currently in place in state agencies to determine if there are sufficient policies, standards, and procedures in place to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content, as defined, inside or outside the firewall of state agencies. The bill would require the office, following the review, to develop a statewide plan to require the implementation by state agencies, during the next fiscal year, of any information security technology the office determines to be necessary to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content of a state agency.
## Digest Key
## Bill Text
The people of the State of California do enact as follows:SECTION 1. Section 11549.2 is added to the Government Code, to read:11549.2. (a) In addition to the information security program responsibilities established in Section 11549.3, on or before July 1, 2019, the office shall review information security technologies currently in place in state agencies to determine if there are sufficient policies, standards, and procedures in place to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content inside or outside the firewall of state agencies.(b) Following the review pursuant to subdivision (a), the office shall develop a statewide plan to require the implementation by state agencies, during the next fiscal year, of any information security technology the office determines to be necessary to protect critical government information and prevent the compromise or unauthorized disclosure of the sensitive digital content of a state agency.(c) Nothing in this section shall be construed to affect the application of the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1).(d) For purposes of this section, digital content may include, but is not limited to, any of the following:(1) Common desktop applications, including word processing, presentations, and spreadsheets.(2) Portable document format (PDF).(3) Computer-aided design.(4) Photographs.(5) Videos.
The people of the State of California do enact as follows:
## The people of the State of California do enact as follows:
SECTION 1. Section 11549.2 is added to the Government Code, to read:11549.2. (a) In addition to the information security program responsibilities established in Section 11549.3, on or before July 1, 2019, the office shall review information security technologies currently in place in state agencies to determine if there are sufficient policies, standards, and procedures in place to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content inside or outside the firewall of state agencies.(b) Following the review pursuant to subdivision (a), the office shall develop a statewide plan to require the implementation by state agencies, during the next fiscal year, of any information security technology the office determines to be necessary to protect critical government information and prevent the compromise or unauthorized disclosure of the sensitive digital content of a state agency.(c) Nothing in this section shall be construed to affect the application of the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1).(d) For purposes of this section, digital content may include, but is not limited to, any of the following:(1) Common desktop applications, including word processing, presentations, and spreadsheets.(2) Portable document format (PDF).(3) Computer-aided design.(4) Photographs.(5) Videos.
SECTION 1. Section 11549.2 is added to the Government Code, to read:
### SECTION 1.
11549.2. (a) In addition to the information security program responsibilities established in Section 11549.3, on or before July 1, 2019, the office shall review information security technologies currently in place in state agencies to determine if there are sufficient policies, standards, and procedures in place to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content inside or outside the firewall of state agencies.(b) Following the review pursuant to subdivision (a), the office shall develop a statewide plan to require the implementation by state agencies, during the next fiscal year, of any information security technology the office determines to be necessary to protect critical government information and prevent the compromise or unauthorized disclosure of the sensitive digital content of a state agency.(c) Nothing in this section shall be construed to affect the application of the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1).(d) For purposes of this section, digital content may include, but is not limited to, any of the following:(1) Common desktop applications, including word processing, presentations, and spreadsheets.(2) Portable document format (PDF).(3) Computer-aided design.(4) Photographs.(5) Videos.
11549.2. (a) In addition to the information security program responsibilities established in Section 11549.3, on or before July 1, 2019, the office shall review information security technologies currently in place in state agencies to determine if there are sufficient policies, standards, and procedures in place to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content inside or outside the firewall of state agencies.(b) Following the review pursuant to subdivision (a), the office shall develop a statewide plan to require the implementation by state agencies, during the next fiscal year, of any information security technology the office determines to be necessary to protect critical government information and prevent the compromise or unauthorized disclosure of the sensitive digital content of a state agency.(c) Nothing in this section shall be construed to affect the application of the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1).(d) For purposes of this section, digital content may include, but is not limited to, any of the following:(1) Common desktop applications, including word processing, presentations, and spreadsheets.(2) Portable document format (PDF).(3) Computer-aided design.(4) Photographs.(5) Videos.
11549.2. (a) In addition to the information security program responsibilities established in Section 11549.3, on or before July 1, 2019, the office shall review information security technologies currently in place in state agencies to determine if there are sufficient policies, standards, and procedures in place to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content inside or outside the firewall of state agencies.(b) Following the review pursuant to subdivision (a), the office shall develop a statewide plan to require the implementation by state agencies, during the next fiscal year, of any information security technology the office determines to be necessary to protect critical government information and prevent the compromise or unauthorized disclosure of the sensitive digital content of a state agency.(c) Nothing in this section shall be construed to affect the application of the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1).(d) For purposes of this section, digital content may include, but is not limited to, any of the following:(1) Common desktop applications, including word processing, presentations, and spreadsheets.(2) Portable document format (PDF).(3) Computer-aided design.(4) Photographs.(5) Videos.
11549.2. (a) In addition to the information security program responsibilities established in Section 11549.3, on or before July 1, 2019, the office shall review information security technologies currently in place in state agencies to determine if there are sufficient policies, standards, and procedures in place to protect critical government information and prevent the compromise or unauthorized disclosure of sensitive digital content inside or outside the firewall of state agencies.
(b) Following the review pursuant to subdivision (a), the office shall develop a statewide plan to require the implementation by state agencies, during the next fiscal year, of any information security technology the office determines to be necessary to protect critical government information and prevent the compromise or unauthorized disclosure of the sensitive digital content of a state agency.
(c) Nothing in this section shall be construed to affect the application of the California Public Records Act (Chapter 3.5 (commencing with Section 6250) of Division 7 of Title 1).
(d) For purposes of this section, digital content may include, but is not limited to, any of the following:
(1) Common desktop applications, including word processing, presentations, and spreadsheets.
(2) Portable document format (PDF).
(3) Computer-aided design.
(4) Photographs.
(5) Videos.