AB 670 — Information technology security.

Summary

(1) Existing law establishes, within the Government Operations Agency, the Department of Technology under the supervision of the Director of Technology, who is also known as the State Chief Information Officer. The department is generally responsible for the approval and oversight of information technology projects by, among other things, consulting with state agencies during initial project planning to ensure that project proposals are based on well-defined programmatic needs. Existing law establishes, within the department, the Office of Information Security under the supervision of the Chief of the Office of Information Security. Existing law sets forth the authority of the office, including, but not limited to, the authority to conduct, or require to be conducted, an independent security assessment of any state agency, department, or office, the cost of which is to be funded by the state agency, department, or office being assessed. This bill would additionally require the office, in consultation with the Office of Emergency Services, to require no fewer than 35 independent security assessments of state entities each year and determine basic standards of services to be performed as part of an independent security assessment. The bill would require the state agency, department, or office being assessed to fund the costs of its independent security assessment. The bill would require the office and the Office of Emergency Services to receive the complete results of an independent security assessment. The bill would prohibit, during the process of conducting an independent security assessment, the disclosure of information and records concerning the independent security assessment, except that the information and records would be authorized to be transmitted to state employees and state contractors with specific duties relating to the independent security assessment. The bill would require the disclosure of the results of a completed independent security assessment under state law. This bill would require the office, in consultation with the Office of Emergency Services, to rank state entities on an information security risk index, as specified. The bill would require the office to report to the Department of Technology and the Office of Emergency Services any state entity found noncompliant with information security requirements. The bill would further require the office to notify the Office of Emergency Services, Department of the California Highway Patrol, and the Department of Justice of any criminal or alleged criminal cyber activity affecting any state entity or critical infrastructure of state government. The bill would authorize the office to conduct or require to be conducted an audit of information security to ensure program compliance, the cost of which to be funded by the state agency, department, or office being audited. This bill would authorize the Military Department to perform an independent security assessment as described above. This bill would require state entities, as defined, rather than certain information security officers, to comply with policies and procedures issued by the office. The bill would also make technical, nonsubstantive changes. (2) Existing law requires that a statute that limits the public's right of access to the meetings of public bodies or the writings of public officials and agencies be adopted with findings to demonstrate the interest protected by the limitation and the need for protecting that interest. This bill would limit access to information and records of an ongoing independent security assessment and would make findings to demonstrate the interest protected by the limitation and the need for protecting that interest.

Bill Text

• Chaptered 10/06/15 - Chaptered Current pdf October 06, 2015
• Enrolled 09/14/15 - Enrolled pdf September 14, 2015
• Amended 09/03/15 - Amended Senate pdf September 03, 2015
• Amended 06/23/15 - Amended Senate pdf June 23, 2015
• Amended 06/15/15 - Amended Senate pdf June 15, 2015
• Amended 04/06/15 - Amended Assembly pdf April 06, 2015
• Introduced 02/25/15 - Introduced pdf February 25, 2015
• AB670 View text html

Action History

1. October 06, 2015

   Chaptered by Secretary of State - Chapter 518, Statutes of 2015.

2. October 06, 2015

   Approved by the Governor.

3. September 18, 2015

   Enrolled and presented to the Governor at 4 p.m.

4. September 09, 2015

   Senate amendments concurred in. To Engrossing and Enrolling. (Ayes 79. Noes 0. Page 3000.).

5. September 09, 2015

   Assembly Rule 77 suspended. (Page 2990.)

6. September 08, 2015

   In Assembly. Concurrence in Senate amendments pending. May be considered on or after September 10 pursuant to Assembly Rule 77.

7. September 08, 2015

   Read third time. Passed. Ordered to the Assembly. (Ayes 39. Noes 0. Page 2594.).

8. September 04, 2015

   Read second time. Ordered to third reading.

9. September 03, 2015

   Read third time and amended. Ordered to second reading.

10. August 31, 2015

    Read second time. Ordered to third reading.

11. August 27, 2015

    From committee: Do pass. (Ayes 6. Noes 0.) (August 27).

12. August 17, 2015

    In committee: Referred to APPR. suspense file.

13. July 13, 2015

    In committee: Hearing postponed by committee.

14. June 30, 2015

    Re-referred to Com. on APPR.

15. June 30, 2015

    Withdrawn from committee.

16. June 29, 2015

    From committee: Do pass and re-refer to Com. on JUD. (Ayes 12. Noes 0.) (June 29). Re-referred to Com. on JUD.

17. June 23, 2015

    From committee chair, with author's amendments: Amend, and re-refer to committee. Read second time, amended, and re-referred to Com. on G.O.

18. June 15, 2015

    From committee chair, with author's amendments: Amend, and re-refer to committee. Read second time, amended, and re-referred to Com. on G.O.

19. June 11, 2015

    Referred to Coms. on G.O. and JUD.

20. June 02, 2015

    In Senate. Read first time. To Com. on RLS. for assignment.

21. June 02, 2015

    Read third time. Passed. Ordered to the Senate. (Ayes 79. Noes 0. Page 1771.)

22. May 28, 2015

    Read second time. Ordered to third reading.

23. May 28, 2015

    From committee: Do pass. (Ayes 17. Noes 0.) (May 28).

24. May 20, 2015

    In committee: Set, first hearing. Referred to APPR. suspense file.

25. April 08, 2015

    From committee: Do pass and re-refer to Com. on APPR. (Ayes 11. Noes 0.) (April 7). Re-referred to Com. on APPR.

26. April 07, 2015

    Re-referred to Com. on P. & C.P.

27. April 06, 2015

    From committee chair, with author's amendments: Amend, and re-refer to Com. on P. & C.P. Read second time and amended.

28. March 09, 2015

    Referred to Com. on P. & C.P.

29. February 26, 2015

    From printer. May be heard in committee March 28.

30. February 25, 2015

    Read first time. To print.

Sponsors

• Jacqui Irwin · Primary

Votes

Subjects