Chapter 4 – Information Technology

The California Department of Corrections and Rehabilitation (CDCRCalifornia Department of Corrections and Rehabilitation or the department) maintains an on-going strategic planning process that is consistent with the needs, resources, and use of ITInformation Technology within the department in compliance with the State Administrative Manual (SAMState Administrative Manual), section 4900.2. The CDCRCalifornia Department of Corrections and Rehabilitation is required to submit their strategic plan to the California Department of Technology (CDT). The CDT establishes statewide technology policies and governs how these plans are submitted and approved.

This policy outlines CDCRCalifornia Department of Corrections and Rehabilitation’s ITInformation Technology strategic plan, the processes that make up that plan, relevant stakeholders, and the responsibilities of each stakeholder.

The Enterprise Information Services (EISEnterprise Information Services (formerly Information Services Division)) Chief Information Officer (CIO), in collaboration with the EISEnterprise Information Services (formerly Information Services Division) executives and EISEnterprise Information Services (formerly Information Services Division) Division’s program management, shall establish an ongoing strategic planning process and submit its consolidated strategic plan to the CDT for approval. To ensure each CDCRCalifornia Department of Corrections and Rehabilitation’s division’s ITInformation Technology related business
strategies are met, the strategic planning process should:

• Identify emerging threats and opportunities in the department’s environment that have a potential impact on information management and use of ITInformation Technology.

• Assess the department’s strengths and weaknesses in terms of ITInformation Technology infrastructure and information management capabilities.

• Assess the potential of new information technologies to enable new business strategies and further the accomplishment of established strategies.

• Provide for the creation and maintenance of the department’s infrastructure that will support its information requirements and business strategies.

• Establish goals and priorities for the acquisition of new information management capabilities.

• Conduct regular risk assessments and implement risk management plans for identified ITInformation Technology risk within the department.

  • The CDCRCalifornia Department of Corrections and Rehabilitation may determine the format and content of the documentation for its consolidated ITInformation Technology strategic plan. The documentation must be sufficiently detailed to provide CDT with a clear understanding of the department’s Agency Information Management Strategy (AIMS). The CDCRCalifornia Department of Corrections and Rehabilitation must submit documentation of its AIMS to CDT at the time it completes its initial strategic planning effort, and therefore, whenever there is significant change in strategy. For information and guidelines on how to complete an AIMS, see State Information Management Manual (SIMM) section 110 and SAMState Administrative Manual section 4900.3.

  • The CDCRCalifornia Department of Corrections and Rehabilitation must annually certify that the AIMS approved by CDT represents its current strategy. See SAMState Administrative Manual section 4900.5 and SIMM section 60.

The Chief Information Officer (CIO) or designee shall be responsible for ensuring the contents of this Article are current and accurate.