TO:
Agency Chief Information Officers (AIO)
Chief Information Officers (CIO)
Agency Information Security Officers (AISO)
Information Security Officers (ISO)
SUBJECT:
New SIMM 150 GenAI Risk Assessment EZ Forms and GenAI Risk Assessment for General Office Productivity
BACKGROUND:
The California Department of Technology (CDT) is responsible for setting California’s technology policy and has issued guidance through the State Administrative Manual (SAM) and Statewide Information Management Manual (SIMM). These policies now include provisions for Artificial Intelligence (AI) and Generative AI (GenAI), as directed by Executive Order N-12-23 signed by Governor Newsom on September 6, 2023.
To support Agencies in complying with these requirements, CDT released the Generative Artificial Intelligence Risk Assessment for General Office Productivity, a resource designed to simplify the process to complete the SIMM 5305-F GenAI Risk Assessment for some common use cases.
PURPOSE:
The purpose of this Procedures/Standards release is to announce:
- New SIMM 150 Section – Generative Artificial Intelligence Risk Assessment: EZ Forms
- A new SIMM section designed to streamline the Generative AI Risk Assessment process.
- New GenAI Risk Assessment for General Office Productivity
- Tailored for low-risk GenAI use cases.
- Pre-filled categories make it easier to select relevant use cases and complete the assessment.
- Reduces the workload associated with submitting the SIMM 5305-F GenAI Risk Assessment.
- Form submission follows the same process as the low-risk SIMM 5305-F GenAI Risk Assessment.
- Once submitted, risk assessment requirements are met, and procurements can proceed.
REFERENCES:
The following reference materials are associated with this Procedures/Standards update.
- SIMM 5305-F – Generative Artificial Intelligence Risk Assessment
QUESTIONS:
Questions regarding this announcement may be directed to the CDT, Office of Information Security security@state.ca.gov.