Chapter 4 – Information Technology

49110.2  Objectives

• Objectives for this policy are to:

  • Enable the development and implementation of a CDCRCalifornia Department of Corrections and Rehabilitation, CCHCS, and CALPIACalifornia Prison Industry Authority (formerly PIA) (hereinafter referred to as department) identity and access management strategy that comprehensively addresses all access to department information assets.

  • Document requirements for the appropriate control and management of physical and logical access to, and the use of department information assets.

  • Require the use of appropriate authentication methods based on the type and sensitivity of information assets being accessed.

  • Govern the use of privileged access rights, such as those assigned to Administrator and Privileged Accounts.