Chapter 4 – Information Technology

49010.6.5 Information Security Incident Report to DOF

• A report of major incidents as illustrated in SAMState Administrative Manual 4845 shall be submitted to OITOffice of Information Technology within ten working days of the Department’s first awareness of an incident involving one or more of the following:

  • Unauthorized intentional release, modification, or destruction of confidential or sensitive information, or the theft of such information including information stolen in conjunction with the theft of a computer or data storage device.

  • Use of a State information asset in the commission of a crime.

  • Intentional damage or destruction of State information assets, or the theft of such assets with an estimated value in excess of $500.

• The report shall be signed by the Department Director and the Department ISOInformation Security Officer.