Chapter 4 – Information Technology

49240.1 Introduction and Overview

• The continued evolution of information security threats presents increasing risks to the security and privacy of California Department of Corrections and Rehabilitation (CDCRCalifornia Department of Corrections and Rehabilitation), California Correctional Healthcare Services (CCHCS), and California Prison Industry Authority (CALPIACalifornia Prison Industry Authority (formerly PIA)), hereinafter referred to as department, information assets. The risks have the potential to not only disrupt the department’s business functions, but can also jeopardize the department’s essential missions, its image and reputation.

• The department’s information security program management strategy and approach shall be described in the Information Security Program Management Plan (ISPM Plan).