Article 45 – Information Security
49020.8.6 Personal Computer Security
-
Information maintained in a personal computer system, including laptop computers and mobile devices, must be subjected to the same degree of management control and verification of accuracy that is provided for information that is maintained in other automated files. Files containing HRCI or sensitive data shall not be stored in personal computer systems unless it can be demonstrated that doing so is in the best interest of the department and that security measures have been implemented to provide adequate protection. Proposals to use desktop or laptop computers to maintain or access files containing HRCI or sensitive data must be approved by the AISO before implementation.