Chapter 4 – Information Technology

49020.6.2 Information Security Awareness

• It is the responsibility of the department management at all levels to ensure that personnel are aware of their responsibilities:

  • All employees are accountable for the implementation of information security policies and procedures within their areas of responsibility.

  • Accountability requires that employees be aware of the department’s information security policies and procedures.

  • All employees changing jobs or exiting owner, user, or custodian status, shall have their security privileges reviewed immediately, and such persons shall be prevented from having any further opportunity to access information which they no longer have a business need based on their new job duties.

  • Employees with the status of owner, user, or custodian shall have a job description that details that status and the security requirements therein.