Chapter 4 – Information Technology

49260.5 Roles and Responsibilities

• The Department Chief Information Officer (CIO) or designee

  • The CIO or designee owns this policy and is responsible for ensuring that all users of department information assets are aware of this policy and acknowledge their individual responsibilities.

  • The CIO or designee is responsible for ensuring that this policy is reviewed annually and updated accordingly.

  • The CIO or designee is required to audit and assess compliance with this policy at least once every two (2) years.

• Department Owners Information Assets and Program Management

  • Owners of Information Assets shall abide by department ITInformation Technology acquisition policies and processes.

• Department Information Asset Custodians

  • Information Asset Custodians in collaboration with Owners of Information Assets shall ensure that protection controls are identified and implemented for information assets under their purview and in all ITInformation Technology acquisitions.