Chapter 4 – Information Technology

49090.4 Policy Directives

• CDCRCalifornia Department of Corrections and Rehabilitation / CCHCS / CALPIACalifornia Prison Industry Authority (formerly PIA) shall ensure that:

  • A strategy for security analytics and continuous monitoring will be defined, documented, and implemented.
    

  • The strategy will be based on security risk management principles in order to determine optimal monitoring locations, methods, and techniques.
    

  • CDCRCalifornia Department of Corrections and Rehabilitation / CCHCS / CALPIACalifornia Prison Industry Authority (formerly PIA)’s security analytics and continuous monitoring strategy will be integrated with CDCRCalifornia Department of Corrections and Rehabilitation / CCHCS / CALPIACalifornia Prison Industry Authority (formerly PIA)’s security and event logging and monitoring strategy, threat assessments, and security analytics and event correlation.
    

  • CDCRCalifornia Department of Corrections and Rehabilitation / CCHCS / CALPIACalifornia Prison Industry Authority (formerly PIA)’s continuous monitoring is linked to incident response management and other CDCRCalifornia Department of Corrections and Rehabilitation / CCHCS / CALPIACalifornia Prison Industry Authority (formerly PIA) incident management processes.