Department of Corrections and Rehabilitation - Operations Manual

Cancel

Chapter 4 – Information Technology

Article 61 – Data Security Policy

Effective November 3, 2022

View All Sections >

References

  • SIMM 5305-A, Information Security Program Management Standard

  • SAMState Administrative Manual, Section 5305.5, Information Asset Management

  • SAMState Administrative Manual, Section 5310.4, Individual Access to Personal Information

  • SAMState Administrative Manual, Section 5310.6, Data Retention and Destruction

  • SAMState Administrative Manual, Section 5310.7, Security safeguards

  • SAMState Administrative Manual, Section 5340, Information Security Incident Management

  • SAMState Administrative Manual, Section 5340.1, Incident Response Training

  • SAMState Administrative Manual, Section 5340.2, Incident Response Testing

  • SAMState Administrative Manual, Section 5340.3, Incident Handling

  • SAMState Administrative Manual, Section 5340.4, Incident Reporting

  • SAMState Administrative Manual, Section 5350, Encryption

  • SAMState Administrative Manual, Section 5365, Physical access

  • SAMState Administrative Manual, Section 5365.1, Access Control for Output Devices

  • SAMState Administrative Manual, Section 5365.2, Media Protection

  • SAMState Administrative Manual, Section 5365.3, Media Disposal

  • Federal Information Processing Standard, FIPS 199

  • NIST SP 800-53, Access Control, AC-3, AC-4

  • NIST SP 800-53, Audit and Accountability, AU-2, AU-3, AU-13

  • NIST SP 800-53, Configuration Management, CM-8

  • NIST SP 800-53, Media Protection, MP-1, MP-2, MP-3, MP-4, MP-5, MP-6, MP-7

  • NIST SP 800-53, Physical and Environmental Protection, PE-5, PE-19, PE-20

  • NIST SP 800-53, Planning, PL-4

  • NIST SP 800-53, Program Management, PM-9

  • NIST SP 800-53, Risk Assessment, RA-2, RA-3

  • NIST SP 800-53, Security Assessment and Authorization, CACorrectional Administrators-7

  • NIST SP 800-53, System and Communications Protection, SC-4, SC-8, SC-13, SC-17, SC-28

  • NIST SP 800-53, System and Services Acquisition, SA-11

  • NIST SP 800-53, System and Information Integrity, SI-12

  • DOMDepartment Operations Manual Chapter 3, Article 22

  • DOMDepartment Operations Manual Chapter 4, Article 45, Section 49020.6, 49020.6.1, 49020.6.2

  • DOMDepartment Operations Manual Chapter 4, Article 46, Section 49030.4

  • California Government Code Section 11549.3