5320.3    RESPONSIBILITY OF CUSTODIANS OF INFORMATION
(New 03/08)

The responsibilities of a custodian of an automated file or database consist of:

1. Complying with applicable law and administrative policy.
   
   
2. Complying with any additional security policies and procedures established by the owner of the automated information and the agency Information Security Officer.
   
   
3. Advising the owner of the information and the agency Information Security Officer of vulnerabilities that may present a threat to the information and of specific means of protecting that information.
   
   
4. Notifying the owner of the information and the agency Information Security Officer of any actual or attempted violations of security policies, practices and procedures.

AUTHORITY          STANDARDS          GUIDANCE          FORMS          TOOLS