Chapter 4 – Information Technology

49020.9.3 Confidentiality of Production Application Software

• All documentation concerning production applications residing on the CDCRCalifornia Department of Corrections and Rehabilitation’s mainframes, servers, network infrastructure, and workstations is confidential.

• Appropriate procedures to protect and preserve the confidentiality of an application’s documentation are to be developed by the data custodian that has responsibility for, or custody of, such application. The procedures shall ensure that documentation is not divulged except on a needtoknow basis, and then only to persons for whom there are signed security agreements on file.