Chapter 4 – Information Technology

References

• SIMM 5305-A, Information Security Program Management Standard
  SAMState Administrative Manual, Section 5305.4, Personnel Management
  SAMState Administrative Manual, Section 5305.7, Risk Assessment
  SAMState Administrative Manual, Section 5315, Information Security Integration
  SAMState Administrative Manual, Section 5335, Information Security Monitoring
  SAMState Administrative Manual, Section 5335.1, Continuous Monitoring
  SAMState Administrative Manual, Section 5335.2, Auditable Events
  SAMState Administrative Manual, Section 5355, Endpoint Defense
  SAMState Administrative Manual, Section 5355.1, Malicious Code Protection
  SAMState Administrative Manual, Section 5360, Identity And Access Management
  SAMState Administrative Manual, Section 5360.1, Remote Access
  SAMState Administrative Manual, Section 5360.2, Wireless Access
  SAMState Administrative Manual, Section 5365.1, Access Control for Output Devices
  NIST SP 800-53, Access Control AC-1, AC-2 (1)(2)(3)(4), AC-3, AC-4, AC-5, AC-6 (1)(2)(5)(9)(10), AC-7, AC-8, AC-11, AC-12, AC-14, AC-17(1)(2)(3)(4), AC-18(1), AC19(5), AC-20(1)(2), AC-21, AC-22, AC-24
  NIST SP 800-53, Audit & Accountability AU-3, AU-6, AU-7, AU-8, AU-9, AU-10, AU11, AU-13
  NIST SP 800-53, Awareness & Training AT-2
  NIST SP 800-53, Identification & Authorization IA-1, IA-2, IA-3, IA-4, IA-5, IA-6, IA-7, IA8, IA-9, IA-10, IA-11
  NIST SP 800-53, Risk Assessment RA-1, RA-2, RA-3
  DOMDepartment Operations Manual, Chapter 3, Article 22
  DOMDepartment Operations Manual, Chapter 4, Article 45, Section 49020.6.1, 49020.7.1, 49020.9, 49020.10
  California Government Code Section 11549.3