Information Security (Office of Information Security)

INTRODUCTION	5300
STATUTORY PROVISIONS	5300.1
APPLICABILITY	5300.2
AGENCY RESPONSIBILITIES	5300.3
DEFINITIONS	5300.4
RISK MANAGEMENT	5305
RISK ANALYSIS	5305.1
AGENCY RISK MANAGEMENT PROGRAM	5305.2
POLICY, STANDARDS, AND PROCEDURE MANAGEMENT	5310
ORGANIZING INFORMATION SECURITY	5315
AGENCY MANAGEMENT RESPONSIBILITIES	5315.1
AGENCY DESIGNATIONS	5315.2
ASSET PROTECTION	5320
OWNERSHIP OF INFORMATION	5320.1
RESPONSIBILITY OF OWNERS OF INFORMATION	5320.2
RESPONSIBILITY OF CUSTODIANS OF INFORMATION	5320.3
RESPONSIBILITY OF USERS OF INFORMATION	5320.4
CLASSIFICATION OF INFORMATION	5320.5
HUMAN RESOURCES SECURITY	5325
PHYSICAL AND ENVIRONMENTAL SECURITY	5330
COMMUNICATIONS AND OPERATIONS MANAGEMENT	5335
INFORMATION INTEGRITY AND DATA SECURITY	5335.1
PERSONAL COMPUTER SECURITY	5335.2
ACCESS CONTROL	5340
INFORMATION SYSTEMS ACQUISITION, DEVELOPMENT, AND MAINTENANCE	5345
SOFTWARE LICENSING INTEGRITY PRACTICES	5345.1
CRYPTOGRAPHY	5345.2
INCIDENT MANAGEMENT	5350
INFORMATION SECURITY INCIDENT REPORTING REQUIREMENTS	5350.1
CRITERIA FOR REPORTING INCIDENTS	5350.2
INCIDENT FOLLOW-UP REPORT	5350.3
INCIDENTS INVOLVING PERSONAL INFORMATION	5350.4
DISASTER RECOVERY MANAGEMENT	5355
DISASTER RECOVERY PLANNING	5355.1
AGENCY DISASTER RECOVERY PLAN	5355.2
ADDITIONAL STATE DATA CENTER REQUIREMENTS	5355.3
COMPLIANCE	5360
COMPLIANCE SUMMARY	5360.1

Chapter 5300 - Information Security (Office of Information Security)