Chapter 4 – Information Technology

49010.6 Information Management Annual Plan Reporting Requirements

• The Information Management Annual Plan (IMAPInformation Management Annual Plan), submitted by the Department to the DOFDepartment Of Finance, Office of Information Technology (OITOffice of Information Technology), shall contain a certification that the Department is in compliance with State requirements concerning information technology security and risk management. This certification is signed by the CDC Director. In addition, the IMAPInformation Management Annual Plan shall provide the name, title, business address and telephone number of the agency’s ISOInformation Security Officer.