Chapter 4 – Information Technology

49250.3 Scope and Applicability

• The scope of this policy extends to all State and department information assets, including critical infrastructure, as well as information assets, owned or operated by third parties (if applicable) on behalf of the department.

• This policy applies to the department’s Chief Information Officer (CIO) or designee, program management, owners of critical infrastructure, information assets, Department Information Security Officers, Technical Recovery Program Coordinators, and Information Asset Custodians.