Where does an agency find the Requirements to Respond to Incidents Involving a Breach of Personal Information?The SIMM 5340-C – Requirements to Respond to Incidents Involving a Breach of Personal Information (PDF) is available on the Office of Information... Read MoreRead more about Where does an agency find the Requirements to Respond to Incidents Involving a Breach of Personal Information?
Where does a state entity find the California Compliance and Security Incident Reporting System (Cal-CSIRS)?The Cal-CSIRS incident reporting system can be found at Cal-CSIRS. Back to Information Security... Read MoreRead more about Where does a state entity find the California Compliance and Security Incident Reporting System (Cal-CSIRS)?
What happens when an agency is not in full compliance with the state information security and privacy policy as specified in the State Administrative Manual Chapter 5300?The agency has an option of certifying whether or not they are in full compliance with all State... Read MoreRead more about What happens when an agency is not in full compliance with the state information security and privacy policy as specified in the State Administrative Manual Chapter 5300?
Where does an agency find the Risk Management and Privacy Program Certification? The SIMM 5330-B – Information Security and Privacy Program Compliance Certification (PDF) is available on the Schedule of Required Reporting Activities webpage. Back to Information... Read MoreRead more about Where does an agency find the Risk Management and Privacy Program Certification?
If an agency finds it is not in full compliance with the state information security and privacy policy as specified in the State Administrative Manual Chapter 5300 by the submission deadline, will the Office of Information Security grant an extension? No. To meet the... Read MoreRead more about If an agency finds it is not in full compliance with the state information security and privacy policy as specified in the State Administrative Manual Chapter 5300 by the submission deadline, will the Office of Information Security grant an extension?