(a) "Executive department" has the meaning given that term in ORS 174.112, except that "executive department" does not include:
(A) The Secretary of State.
(B) The State Treasurer.
(C) The Attorney General.
(D) The Oregon State Lottery.
(E) Public universities listed in ORS 352.002.
(b) "State agency" means an agency, as defined in ORS 183.310, in the executive department.
(2) All state agencies shall:
(a) Cooperate with the office of the State Chief Information Officer in the implementation of a continuing statewide agency-by-agency risk-based information technology security assessment and remediation program.
(b) Cooperate in the development of, and follow, the plans, rules, policies and standards adopted by the State Chief Information Officer with regard to the unification of agency information technology security functions in this state.
(c) Conduct and document the completion of annual information technology security awareness training for all agency employees.
(d) Report security metrics using methodologies developed by the office of the State Chief Information Officer.
(e) Participate in activities coordinated by the office of the State Chief Information Officer in order to better understand and address security incidents and critical cybersecurity threats to the state.
(3) The State Chief Information Officer shall determine and allocate the costs to state agencies associated with providing information technology services, third-party security evaluations, vulnerability assessments and remediation measures. State agencies shall pay the costs to the State Chief Information Officer in the same manner as the state agency pays other claims. The State Chief Information Officer shall deposit into the State Information Technology Operating Fund established under ORS 276A.209 all moneys that the State Chief Information Officer receives from state agencies for purposes of providing information technology services and administering and enforcing the duties, functions and powers under this section. [2017 c.513 §2]
Copyright ©2024 LegalFix. All rights reserved. LegalFix is not a law firm, is not licensed to practice law, and does not provide legal advice, services, or representation. The information on this website is an overview of the legal plans you can purchase—or that may be provided by your employer as an employee benefit or by your credit union or other membership group as a membership benefit.
LegalFix provides its members with easy access to affordable legal services through a network of independent law firms. LegalFix, its corporate entity, and its officers, directors, employees, agents, and contractors do not provide legal advice, services, or representation—directly or indirectly.
The articles and information on the site are not legal advice and should not be relied upon—they are for information purposes only. You should become a LegalFix member to get legal services from one of our network law firms.
You should not disclose confidential or potentially incriminating information to LegalFix—you should only communicate such information to your network law firm.
The benefits and legal services described in the LegalFix legal plans are not always available in all states or with all plans. See the legal plan Benefit Overview and the more comprehensive legal plan contract during checkout for coverage details in your state.
Use of this website, the purchase of legal plans, and access to the LegalFix networks of law firms are subject to the LegalFix Terms of Service and Privacy Policy.