%PDF-1.5
%âãÏÓ
%%Creator: CompuSet Version  9.4.0 
%%CreationDate:  4/26/2023   6:37:23  
1 0 obj
<<
/Type /Catalog
/Pages 4 0 R
/Outlines 2 0 R
>>
endobj
3 0 obj
[/PDF /Text /ImageB /ImageC]
endobj
6 0 obj
<<
/Length 7 0 R
>>
stream
q
BT
/F235 14 Tf 209.35 752.98 Td (2023)Tj 31.5 0 Td (RECONVENED)Tj 102.85 0 Td (SESSION)Tj
/F235 11 Tf 157.03 -14 Td (REPRINT)Tj
-224.65 -22 Td (CHAPTER)Tj 56.3 0 Td (768)Tj
/F234 11 Tf -259.4 -22 Td (An)Tj 16.38 0 Td (Act)Tj 18.78 0 Td (to)Tj 12.73 0 Td (amend)Tj 33.43 0 Td (and)Tj 20.68 0 Td
(reenact)Tj 37.03 0 Td (§)Tj 9.68 0 Td (2.2)Tj
/F34 11 Tf (-)Tj
/F234 11 Tf (2009)Tj 43.58 0 Td (of)Tj 12.73 0 Td (the)Tj 17.58 0 Td (Code)Tj 27.33 0 Td (of)Tj 12.73 0 Td (Virginia)Tj 40.78
0 Td (and)Tj 20.68 0 Td (to)Tj 12.73 0 Td (amend)Tj 33.42 0 Td (the)Tj 17.57 0 Td (Code)Tj 27.32 0 Td (of)Tj 12.72 0 Td
(Virginia)Tj 40.77 0 Td (by)Tj
-453.65 -11 Td (adding)Tj 34.51 0 Td (in)Tj 12.51 0 Td (Chapter)Tj 39.91 0 Td (55.3)Tj 23.21 0 Td (of)Tj 12.51 0 Td
(Title)Tj 24.05 0 Td (2.2)Tj 17.7 0 Td (a)Tj 9.45 0 Td (section)Tj 35 0 Td (numbered)Tj 47.8 0 Td (2.2)Tj
/F34 11 Tf (-)Tj
/F234 11 Tf (5514.1,)Tj 54.35 0 Td (relating)Tj 38.7 0 Td (to)Tj 12.5 0 Td (administration)Tj 68.6 0 Td (of)Tj 12.5 0 Td
(state)Tj
-443.3 -11 Td (government;)Tj 59.35 0 Td (prohibited)Tj 49.7 0 Td (applications)Tj 58.25 0 Td (and)Tj 20.45 0 Td
(websites.)Tj
/F233 11 Tf 227.1 -33 Td ([S)Tj 12.5 0 Td (1459])Tj
-258.38 -11 Td (Approved)Tj 46.65 0 Td (April)Tj 25.9 0 Td (12,)Tj 16.5 0 Td (2023)Tj
/F235 11 Tf -258.02 -22 Td (Be)Tj 16.1 0 Td (it)Tj 10.65 0 Td (enacted)Tj 39.85 0 Td (by)Tj 15.55 0 Td (the)Tj 18.55 0 Td
(General)Tj 41.7 0 Td (Assembly)Tj 49 0 Td (of)Tj 13.1 0 Td (Virginia:)Tj
-219.5 -11 Td (1.)Tj 12.15 0 Td (That)Tj 26.45 0 Td (§)Tj 9.4 0 Td (2.2)Tj
/F35 11 Tf (-)Tj
/F235 11 Tf (2009)Tj 43.3 0 Td (of)Tj 13.05 0 Td (the)Tj 18.5 0 Td (Code)Tj 28.25 0 Td (of)Tj 13.05 0 Td (Virginia)Tj 42.89 0
Td (is)Tj 11.19 0 Td (amended)Tj 46.54 0 Td (and)Tj 21.59 0 Td (reenacted)Tj 49.49 0 Td (and)Tj 21.59 0 Td (that)Tj 22.79 0 Td
(the)Tj 18.49 0 Td (Code)Tj 28.24 0 Td (of)Tj 13.04 0 Td (Virginia)Tj
-440 -11 Td (is)Tj 11.25 0 Td (amended)Tj 46.6 0 Td (by)Tj 15.55 0 Td (adding)Tj 36.3 0 Td (in)Tj 13.1 0 Td (Chapter)Tj 42.9 0
Td (55.3)Tj 23.2 0 Td (of)Tj 13.1 0 Td (Title)Tj 25.85 0 Td (2.2)Tj 17.7 0 Td (a)Tj 9.45 0 Td (section)Tj 36.2 0 Td
(numbered)Tj 52.05 0 Td (2.2)Tj
/F35 11 Tf (-)Tj
/F235 11 Tf (5514.1)Tj 51.6 0 Td (as)Tj 13.7 0 Td (follows:)Tj
-393.55 -11 Td (§)Tj 8.25 0 Td (2.2)Tj
/F35 11 Tf (-)Tj
/F235 11 Tf (2009.)Tj 46.1 0 Td (Additional)Tj 53.95 0 Td (duties)Tj 31.95 0 Td (of)Tj 13.1 0 Td (the)Tj 18.55 0 Td
(CIO)Tj 24.65 0 Td (relating)Tj 40.5 0 Td (to)Tj 13.1 0 Td (security)Tj 41.05 0 Td (of)Tj 13.1 0 Td (government)Tj 60 0 Td
(information.)Tj
/F233 11 Tf -364.3 -11 Td (A.)Tj 16.02 0 Td (To)Tj 17.57 0 Td (provide)Tj 38.92 0 Td (for)Tj 18.17 0 Td (the)Tj 18.77 0 Td
(security)Tj 40.07 0 Td (of)Tj 14.52 0 Td (state)Tj 25.41 0 Td (government)Tj 57.81 0 Td (electronic)Tj 48.56 0 Td
(information)Tj 57.21 0 Td (from)Tj 26.71 0 Td (unauthorized)Tj 62.66 0 Td (uses,)Tj
-457.4 -11 Td (intrusions)Tj 49.26 0 Td (or)Tj 15.11 0 Td (other)Tj 28.51 0 Td (security)Tj 40.66 0 Td (threats,)Tj 37.91 0 Td
(the)Tj 19.35 0 Td (CIO)Tj 24.8 0 Td (shall)Tj 26.65 0 Td (direct)Tj 30.9 0 Td (the)Tj 19.35 0 Td (development)Tj 62.65 0 Td
(of)Tj 15.1 0 Td (policies,)Tj 42.8 0 Td (standards,)Tj 50.1 0 Td (and)Tj
-463.15 -11 Td (guidelines)Tj 51.02 0 Td (for)Tj 18.72 0 Td (assessing)Tj 46.67 0 Td (security)Tj 40.62 0 Td (risks,)Tj 29.37
0 Td (determining)Tj 58.97 0 Td (the)Tj 19.32 0 Td (appropriate)Tj 55.87 0 Td (security)Tj 40.62 0 Td (measures)Tj 46.66 0 Td
(and)Tj 21.76 0 Td (performing)Tj
-429.6 -11 Td (security)Tj 38.85 0 Td (audits)Tj 30.35 0 Td (of)Tj 13.29 0 Td (government)Tj 56.59 0 Td (electronic)Tj 47.34 0
Td (information.)Tj 58.74 0 Td (Such)Tj 26.09 0 Td (policies,)Tj 40.99 0 Td (standards,)Tj 48.29 0 Td (and)Tj 19.99 0 Td
(guidelines)Tj 49.24 0 Td (shall)Tj 24.84 0 Td (apply)Tj
-454.6 -11 Td (to)Tj 13.11 0 Td (the)Tj 17.96 0 Td (Commonwealth)Tj
/F33 11 Tf (©)Tj
/F233 11 Tf (s)Tj 80.86 0 Td (executive,)Tj 49.31 0 Td (legislative,)Tj 52.36 0 Td (and)Tj 20.4 0 Td (judicial)Tj 37.45 0 Td
(branches)Tj 43.5 0 Td (and)Tj 20.4 0 Td (independent)Tj 58.2 0 Td (agencies.)Tj 45 0 Td (The)Tj 21.6 0 Td (CIO)Tj
-460.15 -11 Td (shall)Tj 24.91 0 Td (work)Tj 26.76 0 Td (with)Tj 23.71 0 Td (representatives)Tj 69.91 0 Td (of)Tj 13.36 0 Td
(the)Tj 17.6 0 Td (Chief)Tj 28.55 0 Td (Justice)Tj 34 0 Td (of)Tj 13.35 0 Td (the)Tj 17.6 0 Td (Supreme)Tj 43.2 0 Td
(Court)Tj 29.2 0 Td (and)Tj 20.05 0 Td (Joint)Tj 25.55 0 Td (Rules)Tj 29.15 0 Td (Committee)Tj 52.95 0 Td (of)Tj
-469.85 -11 Td (the)Tj 20.3 0 Td (General)Tj 41.55 0 Td (Assembly)Tj 50.75 0 Td (to)Tj 15.45 0 Td (identify)Tj 41.04 0 Td
(their)Tj 26.99 0 Td (needs.)Tj 34.59 0 Td (Such)Tj 28.84 0 Td (policies,)Tj 43.74 0 Td (standards,)Tj 51.04 0 Td
(and)Tj 22.74 0 Td (guidelines)Tj 51.99 0 Td (shall,)Tj 30.34 0 Td (at)Tj 14.79 0 Td (a)Tj
-474.15 -11 Td (minimum:)Tj
15 -11 Td (1.)Tj 13.95 0 Td (Address)Tj 41.6 0 Td (the)Tj 19.1 0 Td (scope)Tj 30.65 0 Td (and)Tj 21.55 0 Td (frequency)Tj
49.55 0 Td (of)Tj 14.85 0 Td (security)Tj 40.4 0 Td (audits.)Tj 34.65 0 Td (In)Tj 14.85 0 Td (developing)Tj 54.5 0 Td
(and)Tj 21.55 0 Td (updating)Tj 44.15 0 Td (such)Tj 25.8 0 Td (policies,)Tj
-442.15 -11 Td (standards,)Tj 48.87 0 Td (and)Tj 20.56 0 Td (guidelines,)Tj 52.56 0 Td (the)Tj 18.11 0 Td (CIO)Tj 23.56 0 Td
(shall)Tj 25.41 0 Td (designate)Tj 46.11 0 Td (a)Tj 9.56 0 Td (government)Tj 57.16 0 Td (entity)Tj 29.71 0 Td (to)Tj 13.26 0
Td (oversee,)Tj 40.91 0 Td (plan,)Tj 26.36 0 Td (and)Tj 20.56 0 Td (coordinate)Tj
-432.7 -11 Td (the)Tj 18.28 0 Td (conduct)Tj 39.63 0 Td (of)Tj 14.02 0 Td (periodic)Tj 40.82 0 Td (security)Tj 39.57 0 Td
(audits)Tj 31.07 0 Td (of)Tj 14.02 0 Td (all)Tj 15.82 0 Td (executive)Tj 46.87 0 Td (branch)Tj 34.72 0 Td (agencies)Tj 42.57 0
Td (and)Tj 20.72 0 Td (independent)Tj 58.52 0 Td (agencies.)Tj 45.32 0 Td (The)Tj
-461.95 -11 Td (CIO)Tj 23.82 0 Td (shall)Tj 25.67 0 Td (coordinate)Tj 51.27 0 Td (these)Tj 27.47 0 Td (audits)Tj 31.17 0 Td
(with)Tj 24.47 0 Td (the)Tj 18.37 0 Td (Auditor)Tj 39.12 0 Td (of)Tj 14.12 0 Td (Public)Tj 33.02 0 Td (Accounts)Tj 46.36 0 Td
(and)Tj 20.81 0 Td (the)Tj 18.36 0 Td (Joint)Tj 26.31 0 Td (Legislative)Tj 53.66 0 Td (Audit)Tj
-454 -11 Td (and)Tj 20.03 0 Td (Review)Tj 37.63 0 Td (Commission.)Tj 62.43 0 Td (The)Tj 21.23 0 Td (Chief)Tj 28.53 0 Td
(Justice)Tj 33.98 0 Td (of)Tj 13.33 0 Td (the)Tj 17.58 0 Td (Supreme)Tj 43.18 0 Td (Court)Tj 29.18 0 Td (and)Tj 20.03 0 Td
(the)Tj 17.58 0 Td (Joint)Tj 25.53 0 Td (Rules)Tj 29.12 0 Td (Committee)Tj 52.92 0 Td (of)Tj 13.32 0 Td (the)Tj
-465.6 -11 Td (General)Tj 39.69 0 Td (Assembly)Tj 48.89 0 Td (shall)Tj 25.74 0 Td (determine)Tj 48.89 0 Td (the)Tj 18.44 0 Td
(most)Tj 26.39 0 Td (appropriate)Tj 54.98 0 Td (methods)Tj 42.23 0 Td (to)Tj 13.58 0 Td (review)Tj 34.83 0 Td (the)Tj 18.43 0
Td (protection)Tj 49.53 0 Td (of)Tj 14.18 0 Td (electronic)Tj
-435.8 -11 Td (information)Tj 55.8 0 Td (within)Tj 32 0 Td (their)Tj 24.05 0 Td (branches;)Tj
-96.85 -11 Td (2.)Tj 12.2 0 Td (Control)Tj 37.5 0 Td (unauthorized)Tj 61.25 0 Td (uses,)Tj 25.55 0 Td (intrusions,)Tj 50 0 Td
(or)Tj 13.1 0 Td (other)Tj 26.5 0 Td (security)Tj 38.65 0 Td (threats;)Tj
-264.75 -11 Td (3.)Tj 13.27 0 Td (Provide)Tj 39.17 0 Td (for)Tj 17.82 0 Td (the)Tj 18.42 0 Td (protection)Tj 49.52 0 Td
(of)Tj 14.17 0 Td (confidential)Tj 57.42 0 Td (data)Tj 23.27 0 Td (maintained)Tj 53.77 0 Td (by)Tj 16.02 0 Td (state)Tj 25.07
0 Td (agencies)Tj 42.72 0 Td (against)Tj 36.06 0 Td (unauthorized)Tj
-421.7 -11 Td (access)Tj 33.26 0 Td (and)Tj 21.21 0 Td (use)Tj 19.96 0 Td (in)Tj 13.91 0 Td (order)Tj 28.51 0 Td
(to)Tj 13.91 0 Td (ensure)Tj 33.96 0 Td (the)Tj 18.76 0 Td (security)Tj 40.06 0 Td (and)Tj 21.21 0 Td (privacy)Tj 38.25 0 Td
(of)Tj 14.5 0 Td (citizens)Tj 38.8 0 Td (of)Tj 14.5 0 Td (the)Tj 18.75 0 Td (Commonwealth)Tj 75.45 0 Td (in)Tj 13.9 0 Td
(their)Tj
-458.9 -11 Td (interaction)Tj 52.65 0 Td (with)Tj 25.25 0 Td (state)Tj 25.8 0 Td (government.)Tj 60.95 0 Td (Such)Tj 27.7 0 Td
(policies,)Tj 42.6 0 Td (standards,)Tj 49.89 0 Td (and)Tj 21.59 0 Td (guidelines)Tj 50.84 0 Td (shall)Tj 26.44 0 Td
(include)Tj 38.04 0 Td (requirements)Tj
-421.75 -11 Td (that)Tj 21.76 0 Td (\(i\))Tj 15.66 0 Td (any)Tj 21.16 0 Td (state)Tj 25.36 0 Td (employee)Tj 47.96 0 Td
(or)Tj 14.46 0 Td (other)Tj 27.86 0 Td (authorized)Tj 51.61 0 Td (user)Tj 23.56 0 Td (of)Tj 14.46 0 Td (a)Tj 10.16 0 Td
(state)Tj 25.36 0 Td (technology)Tj 54.11 0 Td (asset)Tj 26.56 0 Td (provide)Tj 38.86 0 Td (passwords)Tj 50.95 0 Td
(or)Tj
-469.85 -11 Td (other)Tj 28.77 0 Td (means)Tj 34.21 0 Td (of)Tj 15.36 0 Td (authentication)Tj 68.36 0 Td (to)Tj 14.76 0 Td
(use)Tj 20.81 0 Td (a)Tj 11.06 0 Td (technology)Tj 55.01 0 Td (asset)Tj 27.46 0 Td (and)Tj 22.06 0 Td (access)Tj 34.11 0 Td
(a)Tj 11.06 0 Td (state)Tj
/F33 11 Tf (-)Tj
/F233 11 Tf (owned)Tj 59.16 0 Td (or)Tj 15.36 0 Td (state)Tj
/F33 11 Tf (-)Tj
/F233 11 Tf (operated)Tj
-417.55 -11 Td (computer)Tj 49.47 0 Td (network)Tj 43.97 0 Td (or)Tj 17.17 0 Td (database)Tj 45.72 0 Td (and)Tj 23.87 0 Td
(\(ii\))Tj 21.42 0 Td (a)Tj 12.87 0 Td (digital)Tj 36.07 0 Td (rights)Tj 33.02 0 Td (management)Tj 64.07 0 Td (system)Tj 38.47
0 Td (or)Tj 17.16 0 Td (other)Tj 30.56 0 Td (means)Tj 36.01 0 Td (of)Tj
-469.85 -11 Td (authenticating)Tj 68.25 0 Td (and)Tj 21.95 0 Td (controlling)Tj 54.3 0 Td (an)Tj 16.44 0 Td (individual)Tj
/F33 11 Tf (©)Tj
/F233 11 Tf (s)Tj 56.84 0 Td (ability)Tj 34.14 0 Td (to)Tj 14.64 0 Td (access)Tj 33.99 0 Td (electronic)Tj 49.29 0 Td
(records)Tj 38.34 0 Td (be)Tj 16.44 0 Td (utilized)Tj 38.99 0 Td (to)Tj 14.64 0 Td (limit)Tj
-458.25 -11 Td (access)Tj 31.85 0 Td (to)Tj 12.5 0 Td (and)Tj 19.8 0 Td (use)Tj 18.55 0 Td (of)Tj 13.1 0 Td (electronic)Tj
47.15 0 Td (records)Tj 36.2 0 Td (that)Tj 20.4 0 Td (contain)Tj 36.25 0 Td (confidential)Tj 56.35 0 Td (information)Tj 55.8 0
Td (to)Tj 12.5 0 Td (authorized)Tj 50.25 0 Td (individuals;)Tj
-395.7 -11 Td (4.)Tj 12.3 0 Td (Address)Tj 39.95 0 Td (the)Tj 17.45 0 Td (creation)Tj 39.35 0 Td (and)Tj 19.89 0 Td
(operation)Tj 45.49 0 Td (of)Tj 13.19 0 Td (a)Tj 8.89 0 Td (risk)Tj 20.49 0 Td (management)Tj 60.09 0 Td (program)Tj 41.24 0
Td (designed)Tj 43.04 0 Td (to)Tj 12.59 0 Td (identify)Tj 38.19 0 Td (information)Tj
-427.15 -11 Td (technology)Tj 54.32 0 Td (security)Tj 40.21 0 Td (gaps)Tj 25.61 0 Td (and)Tj 21.36 0 Td (develop)Tj 40.26 0 Td
(plans)Tj 28.66 0 Td (to)Tj 14.06 0 Td (mitigate)Tj 41.46 0 Td (the)Tj 18.91 0 Td (gaps.)Tj 28.36 0 Td (All)Tj 19.51 0 Td
(agencies)Tj 43.21 0 Td (in)Tj 14.06 0 Td (the)Tj 18.91 0 Td (Commonwealth)Tj
-408.9 -11 Td (shall)Tj 25.77 0 Td (cooperate)Tj 47.67 0 Td (with)Tj 24.57 0 Td (the)Tj 18.47 0 Td (CIO,)Tj 26.67 0 Td
(including)Tj 46.56 0 Td (\(i\))Tj 15.41 0 Td (providing)Tj 47.81 0 Td (the)Tj 18.46 0 Td (CIO)Tj 23.91 0 Td (with)Tj 24.56 0
Td (information)Tj 56.91 0 Td (required)Tj 41.61 0 Td (to)Tj 13.61 0 Td (create)Tj 31.16 0 Td (and)Tj
-463.15 -11 Td (implement)Tj 54.41 0 Td (a)Tj 12.31 0 Td (Commonwealth)Tj 77.56 0 Td (risk)Tj 23.91 0 Td (management)Tj 63.51
0 Td (program,)Tj 47.41 0 Td (\(ii\))Tj 20.86 0 Td (creating)Tj 42.76 0 Td (an)Tj 17.81 0 Td (agency)Tj 38.51 0 Td
(risk)Tj 23.9 0 Td (management)Tj
-422.95 -11 Td (program,)Tj 43.9 0 Td (and)Tj 19.8 0 Td (\(iii\))Tj 20.4 0 Td (complying)Tj 50.95 0 Td (with)Tj 23.45 0 Td
(all)Tj 14.9 0 Td (other)Tj 26.5 0 Td (risk)Tj 20.4 0 Td (management)Tj 60 0 Td (activities;)Tj 46.55 0 Td (and)Tj
-311.85 -11 Td (5.)Tj 15.75 0 Td (Require)Tj 42.2 0 Td (that)Tj 23.95 0 Td (any)Tj 23.35 0 Td (contract)Tj 42.8 0 Td
(for)Tj 20.3 0 Td (information)Tj 59.35 0 Td (technology)Tj 56.29 0 Td (entered)Tj 39.74 0 Td (into)Tj 24.59 0 Td
(by)Tj 18.49 0 Td (the)Tj 20.89 0 Td (Commonwealth)Tj
/F33 11 Tf (©)Tj
/F233 11 Tf (s)Tj
-402.7 -11 Td (executive,)Tj 48.88 0 Td (legislative,)Tj 51.93 0 Td (and)Tj 19.98 0 Td (judicial)Tj 37.03 0 Td (branches)Tj
43.08 0 Td (and)Tj 19.98 0 Td (independent)Tj 57.78 0 Td (agencies)Tj 41.83 0 Td (require)Tj 35.17 0 Td (compliance)Tj 54.67 0
Td (with)Tj 23.62 0 Td (applicable)Tj
-433.95 -11 Td (federal)Tj 34.35 0 Td (laws)Tj 24 0 Td (and)Tj 19.8 0 Td (regulations)Tj 52.7 0 Td (pertaining)Tj 48.45 0 Td
(to)Tj 12.5 0 Td (information)Tj 55.8 0 Td (security)Tj 38.65 0 Td (and)Tj 19.8 0 Td (privacy.)Tj
-291.05 -11 Td (B.)Tj 15.19 0 Td (1.)Tj 13.39 0 Td (The)Tj 22.18 0 Td (CIO)Tj 23.98 0 Td (shall)Tj 25.83 0 Td (annually)Tj
42.93 0 Td (report)Tj 31.33 0 Td (to)Tj 13.68 0 Td (the)Tj 18.53 0 Td (Governor,)Tj 49.93 0 Td (the)Tj 18.53 0 Td
(Secretary,)Tj 49.23 0 Td (and)Tj 20.98 0 Td (General)Tj 39.78 0 Td (Assembly)Tj 48.98 0 Td (on)Tj 16.13 0 Td (the)Tj
-465.6 -11 Td (results)Tj 35.08 0 Td (of)Tj 15.63 0 Td (security)Tj 41.18 0 Td (audits,)Tj 35.43 0 Td (the)Tj 19.88 0 Td
(extent)Tj 33.28 0 Td (to)Tj 15.03 0 Td (which)Tj 33.27 0 Td (security)Tj 41.17 0 Td (policy,)Tj 36.67 0 Td (standards,)Tj
50.62 0 Td (and)Tj 22.32 0 Td (guidelines)Tj 51.57 0 Td (have)Tj 27.17 0 Td (been)Tj
-458.3 -11 Td (adopted)Tj 38.73 0 Td (by)Tj 14.98 0 Td (executive)Tj 45.98 0 Td (branch)Tj 33.83 0 Td (and)Tj 19.83 0 Td
(independent)Tj 57.63 0 Td (agencies,)Tj 44.43 0 Td (and)Tj 19.83 0 Td (a)Tj 8.83 0 Td (list)Tj 17.38 0 Td (of)Tj 13.12 0 Td
(those)Tj 27.12 0 Td (executive)Tj 45.97 0 Td (branch)Tj 33.82 0 Td (agencies)Tj 41.67 0 Td (and)Tj
-463.15 -11 Td (independent)Tj 58.96 0 Td (agencies)Tj 43.01 0 Td (that)Tj 21.76 0 Td (have)Tj 26.01 0 Td (not)Tj 19.36 0 Td
(implemented)Tj 62.61 0 Td (acceptable)Tj 51.51 0 Td (security)Tj 40.01 0 Td (and)Tj 21.16 0 Td (risk)Tj 21.76 0 Td
(management)Tj 61.35 0 Td (regulations,)Tj
-427.5 -11 Td (policies,)Tj 41.38 0 Td (standards,)Tj 48.68 0 Td (and)Tj 20.38 0 Td (guidelines)Tj 49.63 0 Td (to)Tj 13.08 0
Td (control)Tj 35.63 0 Td (unauthorized)Tj 61.83 0 Td (uses,)Tj 26.13 0 Td (intrusions,)Tj 50.58 0 Td (or)Tj 13.67 0 Td
(other)Tj 27.07 0 Td (security)Tj 39.22 0 Td (threats.)Tj 36.47 0 Td (For)Tj
-463.75 -11 Td (any)Tj 19.97 0 Td (executive)Tj 46.11 0 Td (branch)Tj 33.96 0 Td (agency)Tj 35.16 0 Td (or)Tj 13.26 0 Td
(independent)Tj 57.76 0 Td (agency)Tj 35.16 0 Td (whose)Tj 32.11 0 Td (security)Tj 38.81 0 Td (audit)Tj 26.06 0 Td
(results)Tj 32.71 0 Td (and)Tj 19.96 0 Td (plans)Tj 27.26 0 Td (for)Tj 16.91 0 Td (corrective)Tj
-435.2 -11 Td (action)Tj 32.28 0 Td (are)Tj 18.83 0 Td (unacceptable,)Tj 65.43 0 Td (the)Tj 18.88 0 Td (CIO)Tj 24.33 0 Td
(shall)Tj 26.18 0 Td (report)Tj 31.68 0 Td (such)Tj 25.58 0 Td (results)Tj 34.07 0 Td (to)Tj 14.02 0 Td (\(i\))Tj 15.82 0 Td
(the)Tj 18.87 0 Td (Secretary,)Tj 49.57 0 Td (\(ii\))Tj 18.87 0 Td (any)Tj 21.32 0 Td (other)Tj 28.02 0 Td (affected)Tj
-443.75 -11 Td (cabinet)Tj 37.86 0 Td (secretary,)Tj 48.46 0 Td (\(iii\))Tj 22.66 0 Td (the)Tj 19.61 0 Td (Governor,)Tj 51.01
0 Td (and)Tj 22.06 0 Td (\(iv\))Tj 22.06 0 Td (the)Tj 19.61 0 Td (Auditor)Tj 40.36 0 Td (of)Tj 15.36 0 Td (Public)Tj 34.25 0
Td (Accounts.)Tj 50.35 0 Td (Upon)Tj 30.6 0 Td (review)Tj 36 0 Td (of)Tj 15.35 0 Td (the)Tj
-465.6 -11 Td (security)Tj 39.3 0 Td (audit)Tj 26.55 0 Td (results)Tj 33.2 0 Td (in)Tj 13.15 0 Td (question,)Tj 44.55 0 Td
(the)Tj 18 0 Td (CIO)Tj 23.44 0 Td (may)Tj 23.49 0 Td (take)Tj 22.84 0 Td (action)Tj 31.39 0 Td (to)Tj 13.14 0 Td
(suspend)Tj 39.94 0 Td (the)Tj 17.99 0 Td (executive)Tj 46.59 0 Td (branch)Tj 34.44 0 Td (agency)Tj
/F33 11 Tf (©)Tj
/F233 11 Tf (s)Tj 41.84 0 Td (or)Tj
-469.85 -11 Td (independent)Tj 59.24 0 Td (agency)Tj
/F33 11 Tf (©)Tj
/F233 11 Tf (s)Tj 42.84 0 Td (information)Tj 57.44 0 Td (technology)Tj 54.39 0 Td (projects)Tj 40.28 0 Td (pursuant)Tj 43.38 0
Td (to)Tj 14.13 0 Td (subsection)Tj 51.88 0 Td (B)Tj 12.88 0 Td (of)Tj 14.73 0 Td (§)Tj 11.08 0 Td (2.2)Tj
/F33 11 Tf (-)Tj
/F233 11 Tf (2016.1,)Tj 55.98 0 Td (limit)Tj
-458.25 -11 Td (additional)Tj 48.57 0 Td (information)Tj 56.52 0 Td (technology)Tj 53.47 0 Td (investments)Tj 57.07 0 Td
(pending)Tj 40.07 0 Td (acceptable)Tj 50.86 0 Td (corrective)Tj 48.46 0 Td (actions,)Tj 38.46 0 Td (and)Tj 20.51 0 Td
(recommend)Tj 56.46 0 Td (to)Tj
-470.45 -11 Td (the)Tj 17.35 0 Td (Governor)Tj 46 0 Td (and)Tj 19.8 0 Td (Secretary)Tj 45.3 0 Td (any)Tj 19.8 0 Td
(other)Tj 26.5 0 Td (appropriate)Tj 53.9 0 Td (actions.)Tj
-213.65 -11 Td (2.)Tj 13.88 0 Td (Executive)Tj 49.48 0 Td (branch)Tj 35.48 0 Td (agencies)Tj 43.33 0 Td (and)Tj 21.48 0 Td
(independent)Tj 59.28 0 Td (agencies)Tj 43.33 0 Td (subject)Tj 36.67 0 Td (to)Tj 14.17 0 Td (such)Tj 25.72 0 Td (audits)Tj
31.82 0 Td (as)Tj 14.72 0 Td (required)Tj 42.17 0 Td (by)Tj 16.62 0 Td (this)Tj
-463.15 -11 Td (section)Tj 35.94 0 Td (shall)Tj 25.59 0 Td (fully)Tj 25.64 0 Td (cooperate)Tj 47.49 0 Td (with)Tj 24.39 0 Td
(the)Tj 18.29 0 Td (entity)Tj 29.89 0 Td (designated)Tj 51.79 0 Td (to)Tj 13.44 0 Td (perform)Tj 40.24 0 Td (such)Tj 24.99 0
Td (audits)Tj 31.09 0 Td (and)Tj 20.74 0 Td (bear)Tj 23.74 0 Td (any)Tj 20.74 0 Td (associated)Tj
-434 -11 Td (costs.)Tj 28.84 0 Td (Public)Tj 32.24 0 Td (bodies)Tj 32.84 0 Td (that)Tj 20.64 0 Td (are)Tj 17.54 0 Td
(not)Tj 18.24 0 Td (required)Tj 40.74 0 Td (to)Tj 12.74 0 Td (but)Tj 18.24 0 Td (elect)Tj 24.84 0 Td (to)Tj 12.74 0 Td
(use)Tj 18.78 0 Td (the)Tj 17.58 0 Td (entity)Tj 29.18 0 Td (designated)Tj 51.08 0 Td (to)Tj 12.73 0 Td (perform)Tj 39.53 0 Td
(such)Tj 24.28 0 Td (audits)Tj
-452.8 -11 Td (shall)Tj 24.65 0 Td (also)Tj 21.6 0 Td (bear)Tj 22.8 0 Td (any)Tj 19.8 0 Td (associated)Tj 48.95 0 Td
(costs.)Tj
ET
Q
endstream
endobj
7 0 obj
17438
endobj
8 0 obj
<<
/Type /Page
/Parent 9 0 R
/Resources << /Font 5 0 R /ProcSet 3 0 R >>
/MediaBox [ 0 0 612 792 ]
/Contents 6 0 R
>>
endobj
10 0 obj
<<
/Length 11 0 R
>>
stream
q
BT
/F233 11 Tf 293.15 755.98 Td (2)Tj 8.25 0 Td (of)Tj 11.9 0 Td (3)Tj
-238.32 -23 Td (C.)Tj 14.63 0 Td (In)Tj 13.73 0 Td (addition)Tj 40.58 0 Td (to)Tj 13.13 0 Td (coordinating)Tj 60.08 0 Td
(security)Tj 39.28 0 Td (audits)Tj 30.78 0 Td (as)Tj 13.68 0 Td (provided)Tj 43.63 0 Td (in)Tj 13.13 0 Td (subdivision)Tj
55.23 0 Td (B)Tj 11.88 0 Td (1,)Tj 12.83 0 Td (the)Tj 17.97 0 Td (CIO)Tj 23.42 0 Td (shall)Tj 25.27 0 Td (conduct)Tj
-444.25 -11 Td (an)Tj 16.31 0 Td (annual)Tj 35.21 0 Td (comprehensive)Tj 72.36 0 Td (review)Tj 35.76 0 Td (of)Tj 15.11 0 Td
(cybersecurity)Tj 65 0 Td (policies)Tj 40.05 0 Td (of)Tj 15.1 0 Td (every)Tj 30.3 0 Td (executive)Tj 47.95 0 Td (branch)Tj
35.8 0 Td (agency,)Tj 39.75 0 Td (with)Tj 25.45 0 Td (a)Tj
-474.15 -11 Td (particular)Tj 46.24 0 Td (focus)Tj 27.99 0 Td (on)Tj 15.24 0 Td (any)Tj 20.09 0 Td (breaches)Tj 42.54 0 Td
(in)Tj 12.79 0 Td (information)Tj 56.09 0 Td (technology)Tj 53.04 0 Td (that)Tj 20.69 0 Td (occurred)Tj 42.59 0 Td
(in)Tj 12.78 0 Td (the)Tj 17.63 0 Td (reviewable)Tj 52.28 0 Td (year)Tj 23.08 0 Td (and)Tj 20.08 0 Td (any)Tj
-463.15 -11 Td (steps)Tj 25.93 0 Td (taken)Tj 27.78 0 Td (by)Tj 15.02 0 Td (agencies)Tj 41.72 0 Td (to)Tj 12.57 0 Td
(strengthen)Tj 49.72 0 Td (cybersecurity)Tj 63.07 0 Td (measures.)Tj 47.52 0 Td (Upon)Tj 28.42 0 Td (completion)Tj 53.42 0 Td
(of)Tj 13.17 0 Td (the)Tj 17.42 0 Td (annual)Tj 33.27 0 Td (review,)Tj 36.57 0 Td (the)Tj
-465.6 -11 Td (CIO)Tj 23.02 0 Td (shall)Tj 24.87 0 Td (issue)Tj 26.07 0 Td (a)Tj 9.01 0 Td (report)Tj 30.36 0 Td
(of)Tj 13.31 0 Td (his)Tj 16.96 0 Td (findings)Tj 40.16 0 Td (to)Tj 12.71 0 Td (the)Tj 17.56 0 Td (Chairmen)Tj 47.41 0 Td
(of)Tj 13.31 0 Td (the)Tj 17.56 0 Td (House)Tj 32.16 0 Td (Committee)Tj 52.91 0 Td (on)Tj 15.16 0 Td (Appropriations)Tj 70.61
0 Td (and)Tj
-463.15 -11 Td (the)Tj 21.92 0 Td (Senate)Tj 37.72 0 Td (Committee)Tj 57.27 0 Td (on)Tj 19.51 0 Td (Finance)Tj 43.21 0 Td
(and)Tj 24.36 0 Td (Appropriations.)Tj 77.71 0 Td (Such)Tj 30.46 0 Td (report)Tj 34.71 0 Td (shall)Tj 29.21 0 Td
(not)Tj 22.56 0 Td (contain)Tj 40.81 0 Td (technical)Tj
-439.45 -11 Td (information)Tj 58.13 0 Td (deemed)Tj 40.38 0 Td (by)Tj 17.27 0 Td (the)Tj 19.67 0 Td (CIO)Tj 25.12 0 Td
(to)Tj 14.82 0 Td (be)Tj 16.62 0 Td (security)Tj 40.97 0 Td (sensitive)Tj 44.62 0 Td (or)Tj 15.42 0 Td (information)Tj 58.12 0
Td (that)Tj 22.72 0 Td (would)Tj 33.72 0 Td (expose)Tj 36.72 0 Td (security)Tj
-444.3 -11 Td (vulnerabilities.)Tj
15 -11 Td (D.)Tj 14.98 0 Td (The)Tj 21.38 0 Td (provisions)Tj 50.07 0 Td (of)Tj 13.47 0 Td (this)Tj 20.17 0 Td (section)Tj
35.37 0 Td (shall)Tj 25.02 0 Td (not)Tj 18.37 0 Td (infringe)Tj 39.07 0 Td (upon)Tj 26.32 0 Td (responsibilities)Tj 70.72 0 Td
(assigned)Tj 42.07 0 Td (to)Tj 12.87 0 Td (the)Tj 17.72 0 Td (Comptroller,)Tj
-422.6 -11 Td (the)Tj 20.13 0 Td (Auditor)Tj 40.88 0 Td (of)Tj 15.88 0 Td (Public)Tj 34.78 0 Td (Accounts,)Tj 50.88 0 Td
(or)Tj 15.88 0 Td (the)Tj 20.13 0 Td (Joint)Tj 28.07 0 Td (Legislative)Tj 55.42 0 Td (Audit)Tj 31.72 0 Td (and)Tj 22.57 0 Td
(Review)Tj 40.17 0 Td (Commission)Tj 62.22 0 Td (by)Tj 17.72 0 Td (other)Tj
-456.45 -11 Td (provisions)Tj 49.7 0 Td (of)Tj 13.1 0 Td (the)Tj 17.35 0 Td (Code)Tj 27.1 0 Td (of)Tj 13.1 0 Td (Virginia.)Tj
-105.35 -11 Td (E.)Tj 16.15 0 Td (The)Tj 23.75 0 Td (CIO)Tj 25.55 0 Td (shall)Tj 27.4 0 Td (promptly)Tj 47 0 Td (receive)Tj
38.3 0 Td (reports)Tj 37.15 0 Td (from)Tj 28.05 0 Td (public)Tj 34.15 0 Td (bodies)Tj 35.35 0 Td (in)Tj 15.25 0 Td
(the)Tj 20.1 0 Td (Commonwealth)Tj 76.8 0 Td (made)Tj 30.45 0 Td (in)Tj
-470.45 -11 Td (accordance)Tj 54.82 0 Td (with)Tj 25.07 0 Td (§)Tj 11.07 0 Td (2.2)Tj
/F33 11 Tf (-)Tj
/F233 11 Tf (5514)Tj 44.97 0 Td (and)Tj 21.42 0 Td (shall)Tj 26.27 0 Td (take)Tj 23.82 0 Td (such)Tj 25.67 0 Td (actions)Tj
36.62 0 Td (as)Tj 14.67 0 Td (are)Tj 18.91 0 Td (necessary,)Tj 50.86 0 Td (convenient,)Tj 56.46 0 Td (or)Tj 14.71 0 Td
(desirable)Tj 45.11 0 Td (to)Tj
-470.45 -11 Td (ensure)Tj 32.55 0 Td (the)Tj 17.35 0 Td (security)Tj 38.65 0 Td (of)Tj 13.1 0 Td (the)Tj 17.35 0 Td
(Commonwealth)Tj
/F33 11 Tf (©)Tj
/F233 11 Tf (s)Tj 80.25 0 Td (electronic)Tj 47.15 0 Td (information)Tj 55.8 0 Td (and)Tj 19.8 0 Td (confidential)Tj 56.35 0 Td
(data.)Tj
-363.35 -11 Td (F.)Tj 16.66 0 Td (The)Tj 24.86 0 Td (CIO)Tj 26.66 0 Td (shall)Tj 28.51 0 Td (provide)Tj 41.36 0 Td
(technical)Tj 47.36 0 Td (guidance)Tj 47.41 0 Td (to)Tj 16.36 0 Td (the)Tj 21.21 0 Td (Department)Tj 59.56 0 Td (of)Tj 16.95 0
Td (General)Tj 42.45 0 Td (Services)Tj 44.9 0 Td (in)Tj 16.35 0 Td (the)Tj
-465.6 -11 Td (development)Tj 60.93 0 Td (of)Tj 13.38 0 Td (policies,)Tj 41.08 0 Td (standards,)Tj 48.38 0 Td (and)Tj 20.08 0
Td (guidelines)Tj 49.33 0 Td (for)Tj 17.03 0 Td (the)Tj 17.62 0 Td (recycling)Tj 45.02 0 Td (and)Tj 20.07 0 Td (disposal)Tj
40.17 0 Td (of)Tj 13.37 0 Td (computers)Tj 49.92 0 Td (and)Tj 20.07 0 Td (other)Tj
-456.45 -11 Td (technology)Tj 53.6 0 Td (assets.)Tj 33.05 0 Td (Such)Tj 26.75 0 Td (policies,)Tj 41.65 0 Td (standards,)Tj
48.94 0 Td (and)Tj 20.64 0 Td (guidelines)Tj 49.89 0 Td (shall)Tj 25.49 0 Td (include)Tj 37.09 0 Td (the)Tj 18.19 0 Td
(expunging,)Tj 53.94 0 Td (in)Tj 13.34 0 Td (a)Tj 9.64 0 Td (manner)Tj 37.69 0 Td (as)Tj
-469.9 -11 Td (determined)Tj 54.33 0 Td (by)Tj 15.98 0 Td (the)Tj 18.38 0 Td (CIO,)Tj 26.58 0 Td (of)Tj 14.13 0 Td
(all)Tj 15.93 0 Td (confidential)Tj 57.38 0 Td (data)Tj 23.23 0 Td (and)Tj 20.83 0 Td (personal)Tj 42.13 0 Td (identifying)Tj
53.18 0 Td (information)Tj 56.83 0 Td (of)Tj 14.13 0 Td (citizens)Tj 38.43 0 Td (of)Tj 14.13 0 Td (the)Tj
-465.6 -11 Td (Commonwealth)Tj 74.05 0 Td (prior)Tj 25.3 0 Td (to)Tj 12.5 0 Td (such)Tj 24.05 0 Td (sale,)Tj 23.7 0 Td
(disposal,)Tj 42.65 0 Td (or)Tj 13.1 0 Td (other)Tj 26.5 0 Td (transfer)Tj 37.4 0 Td (of)Tj 13.1 0 Td (computers)Tj 49.65 0 Td
(or)Tj 13.1 0 Td (other)Tj 26.5 0 Td (technology)Tj 52.75 0 Td (assets.)Tj
-419.35 -11 Td (G.)Tj 17.26 0 Td (The)Tj 23.66 0 Td (CIO)Tj 25.46 0 Td (shall)Tj 27.31 0 Td (provide)Tj 40.16 0 Td
(all)Tj 17.55 0 Td (directors)Tj 44.95 0 Td (of)Tj 15.75 0 Td (agencies)Tj 44.3 0 Td (and)Tj 22.45 0 Td (departments)Tj 60.2 0
Td (with)Tj 26.1 0 Td (all)Tj 17.55 0 Td (such)Tj 26.7 0 Td (information,)Tj
-424.4 -11 Td (guidance,)Tj 46.97 0 Td (and)Tj 20.47 0 Td (assistance)Tj 48.37 0 Td (required)Tj 41.17 0 Td (to)Tj 13.17 0 Td
(ensure)Tj 33.22 0 Td (that)Tj 21.06 0 Td (agencies)Tj 42.31 0 Td (and)Tj 20.46 0 Td (departments)Tj 58.21 0 Td (understand\
)Tj 52.76 0 Td (and)Tj 20.46 0 Td (adhere)Tj 33.81 0 Td (to)Tj 13.16 0 Td (the)Tj
-465.6 -11 Td (policies,)Tj 40.8 0 Td (standards,)Tj 48.1 0 Td (and)Tj 19.8 0 Td (guidelines)Tj 49.05 0 Td (developed)Tj 49.05
0 Td (pursuant)Tj 41.75 0 Td (to)Tj 12.5 0 Td (this)Tj 19.8 0 Td (section.)Tj
-265.85 -11 Td (H.)Tj 15.32 0 Td (The)Tj 21.72 0 Td (CIO)Tj 23.52 0 Td (shall)Tj 25.37 0 Td (promptly)Tj 44.96 0 Td
(notify)Tj 30.91 0 Td (all)Tj 15.61 0 Td (public)Tj 32.11 0 Td (bodies)Tj 33.31 0 Td (as)Tj 13.76 0 Td (defined)Tj 37.56 0 Td
(in)Tj 13.21 0 Td (§)Tj 10.16 0 Td (2.2)Tj
/F33 11 Tf (-)Tj
/F233 11 Tf (5514)Tj 44.06 0 Td (of)Tj 13.81 0 Td (hardware,)Tj 48.16 0 Td (software,)Tj
-438.55 -11 Td (or)Tj 15.06 0 Td (services)Tj 41.16 0 Td (that)Tj 22.36 0 Td (have)Tj 26.61 0 Td (been)Tj 26.61 0 Td
(prohibited)Tj 51.05 0 Td (pursuant)Tj 43.7 0 Td (to)Tj 14.45 0 Td (Chapter)Tj 40.6 0 Td (55.3)Tj 25.15 0 Td (\(§)Tj 15.05 0
Td (2.2)Tj
/F33 11 Tf (-)Tj
/F233 11 Tf (5514)Tj
/F234 11 Tf 45.3 0 Td (et)Tj 13.8 0 Td (seq.)Tj
/F233 11 Tf (\).)Tj
/F234 11 Tf 29.65 0 Td (The)Tj 22.35 0 Td (CIO)Tj 24.75 0 Td (shall)Tj
-457.65 -11 Td (restrict)Tj 35.5 0 Td (access)Tj 32.45 0 Td (to)Tj 12.45 0 Td (prohibited)Tj 49.65 0 Td (applications)Tj 58.19
0 Td (and)Tj 20.39 0 Td (websites)Tj 40.99 0 Td (in)Tj 12.44 0 Td (accordance)Tj 55.04 0 Td (with)Tj 22.79 0 Td (the)Tj 17.29
0 Td (provisions)Tj 49.59 0 Td (of)Tj 12.44 0 Td (§)Tj 9.39 0 Td (2.2)Tj
/F34 11 Tf (-)Tj
/F234 11 Tf (5514.1.)Tj
/F233 11 Tf -413.6 -11 Td (I.)Tj 10.88 0 Td (1.)Tj 12.73 0 Td (This)Tj 23.98 0 Td (subsection)Tj 50.78 0 Td (applies)Tj 35.52
0 Td (to)Tj 13.02 0 Td (the)Tj 17.87 0 Td (Commonwealth)Tj
/F33 11 Tf (©)Tj
/F233 11 Tf (s)Tj 80.77 0 Td (executive,)Tj 49.22 0 Td (legislative,)Tj 52.27 0 Td (and)Tj 20.32 0 Td (judicial)Tj 37.37 0 Td
(branches)Tj 43.42 0 Td (and)Tj
-463.15 -11 Td (independent)Tj 57.6 0 Td (agencies.)Tj
-42.6 -11 Td (2.)Tj 12.95 0 Td (In)Tj 13.85 0 Td (collaboration)Tj 62.6 0 Td (with)Tj 24.2 0 Td (the)Tj 18.1 0 Td
(heads)Tj 29.65 0 Td (of)Tj 13.85 0 Td (executive)Tj 46.7 0 Td (branch)Tj 34.55 0 Td (and)Tj 20.55 0 Td (independent)Tj 58.35
0 Td (agencies)Tj 42.4 0 Td (and)Tj 20.55 0 Td (representatives)Tj
-413.3 -11 Td (of)Tj 13.52 0 Td (the)Tj 17.77 0 Td (Chief)Tj 28.72 0 Td (Justice)Tj 34.17 0 Td (of)Tj 13.52 0 Td
(the)Tj 17.77 0 Td (Supreme)Tj 43.37 0 Td (Court)Tj 29.37 0 Td (and)Tj 20.22 0 Td (the)Tj 17.77 0 Td (Joint)Tj 25.72 0 Td
(Rules)Tj 29.32 0 Td (Committee)Tj 53.12 0 Td (of)Tj 13.51 0 Td (the)Tj 17.76 0 Td (General)Tj 39.01 0 Td (Assembly,)Tj 50.96
0 Td (the)Tj
-465.6 -11 Td (CIO)Tj 24.15 0 Td (shall)Tj 26 0 Td (develop)Tj 40.05 0 Td (and)Tj 21.15 0 Td (annually)Tj 43.1 0 Td
(update)Tj 34.54 0 Td (a)Tj 10.14 0 Td (curriculum)Tj 53.44 0 Td (and)Tj 21.14 0 Td (materials)Tj 45.44 0 Td (for)Tj 18.09 0
Td (training)Tj 39.44 0 Td (all)Tj 16.24 0 Td (state)Tj 25.34 0 Td (employees)Tj 52.19 0 Td (in)Tj
-470.45 -11 Td (information)Tj 59.88 0 Td (security)Tj 42.73 0 Td (awareness)Tj 52.98 0 Td (and)Tj 23.87 0 Td (in)Tj 16.57 0
Td (proper)Tj 36.67 0 Td (procedures)Tj 56.12 0 Td (for)Tj 20.82 0 Td (detecting,)Tj 50.97 0 Td (assessing,)Tj 51.52 0 Td
(reporting,)Tj 51.02 0 Td (and)Tj
-463.15 -11 Td (addressing)Tj 51.16 0 Td (information)Tj 56.11 0 Td (security)Tj 38.96 0 Td (threats.)Tj 36.21 0 Td
(The)Tj 21.31 0 Td (curriculum)Tj 52.41 0 Td (shall)Tj 24.96 0 Td (include)Tj 36.56 0 Td (activities,)Tj 46.56 0 Td
(case)Tj 23.06 0 Td (studies,)Tj 37.45 0 Td (hypothetical)Tj
-424.75 -11 Td (situations,)Tj 49.86 0 Td (and)Tj 20.91 0 Td (other)Tj 27.61 0 Td (methods)Tj 42.26 0 Td (of)Tj 14.21 0 Td
(instruction)Tj 52.01 0 Td (\(i\))Tj 15.41 0 Td (that)Tj 21.51 0 Td (focus)Tj 28.81 0 Td (on)Tj 16.06 0 Td (forming)Tj 40.45 0
Td (good)Tj 27.05 0 Td (information)Tj 56.9 0 Td (security)Tj 39.75 0 Td (habits)Tj
-452.8 -11 Td (and)Tj 23.05 0 Td (procedures)Tj 55.3 0 Td (among)Tj 37.1 0 Td (state)Tj 27.25 0 Td (employees)Tj 54.1 0 Td
(and)Tj 23.05 0 Td (\(ii\))Tj 20.6 0 Td (that)Tj 23.65 0 Td (teach)Tj 30.3 0 Td (best)Tj 24.85 0 Td (practices)Tj 46.1 0 Td
(for)Tj 20 0 Td (detecting,)Tj 50.15 0 Td (assessing,)Tj
-435.5 -11 Td (reporting,)Tj 46.95 0 Td (and)Tj 19.8 0 Td (addressing)Tj 50.85 0 Td (information)Tj 55.8 0 Td (security)Tj
38.65 0 Td (threats.)Tj
-197.05 -11 Td (3.)Tj 13.61 0 Td (Every)Tj 31.56 0 Td (state)Tj 25.41 0 Td (agency)Tj 36.41 0 Td (shall)Tj 26.06 0 Td
(provide)Tj 38.91 0 Td (annual)Tj 34.61 0 Td (information)Tj 57.21 0 Td (security)Tj 40.06 0 Td (training)Tj 39.51 0 Td
(for)Tj 18.15 0 Td (each)Tj 25.4 0 Td (of)Tj 14.5 0 Td (its)Tj 15.7 0 Td (employees)Tj
-432.1 -11 Td (using)Tj 29.13 0 Td (the)Tj 18.73 0 Td (curriculum)Tj 53.48 0 Td (and)Tj 21.18 0 Td (materials)Tj 45.48 0 Td
(developed)Tj 50.43 0 Td (by)Tj 16.33 0 Td (the)Tj 18.73 0 Td (CIO)Tj 24.18 0 Td (pursuant)Tj 43.13 0 Td (to)Tj 13.88 0 Td
(subdivision)Tj 55.98 0 Td (2.)Tj 13.57 0 Td (Employees)Tj 54.07 0 Td (shall)Tj
-458.3 -11 Td (complete)Tj 44.15 0 Td (such)Tj 24.05 0 Td (training)Tj 38.1 0 Td (within)Tj 32 0 Td (30)Tj 14.95 0 Td
(days)Tj 24.05 0 Td (of)Tj 13.1 0 Td (initial)Tj 29.55 0 Td (employment)Tj 58.85 0 Td (and)Tj 19.8 0 Td (by)Tj 14.95 0 Td
(January)Tj 38.05 0 Td (31)Tj 14.95 0 Td (each)Tj 24 0 Td (year)Tj 22.8 0 Td (thereafter.)Tj
-398.35 -11 Td (State)Tj 26.61 0 Td (agencies)Tj 42.41 0 Td (may)Tj 23.61 0 Td (develop)Tj 39.46 0 Td (additional)Tj 48.61 0
Td (training)Tj 38.86 0 Td (materials)Tj 44.86 0 Td (that)Tj 21.16 0 Td (address)Tj 37.56 0 Td (specific)Tj 38.76 0 Td
(needs)Tj 29.65 0 Td (of)Tj 13.85 0 Td (such)Tj 24.8 0 Td (agency,)Tj
-445.2 -11 Td (provided)Tj 44.28 0 Td (that)Tj 21.68 0 Td (such)Tj 25.33 0 Td (materials)Tj 45.38 0 Td (do)Tj 16.23 0 Td
(not)Tj 19.28 0 Td (contradict)Tj 49.08 0 Td (the)Tj 18.62 0 Td (training)Tj 39.37 0 Td (curriculum)Tj 53.37 0 Td
(and)Tj 21.07 0 Td (materials)Tj 45.37 0 Td (developed)Tj 50.32 0 Td (by)Tj 16.22 0 Td (the)Tj
-465.6 -11 Td (CIO.)Tj
15 -11 Td (The)Tj 23.23 0 Td (CIO)Tj 25.03 0 Td (shall)Tj 26.88 0 Td (coordinate)Tj 52.48 0 Td (with)Tj 25.67 0 Td
(and)Tj 22.02 0 Td (assist)Tj 29.87 0 Td (state)Tj 26.22 0 Td (agencies)Tj 43.87 0 Td (in)Tj 14.72 0 Td (implementing)Tj 67.17
0 Td (the)Tj 19.57 0 Td (annual)Tj 35.42 0 Td (information)Tj
-427.15 -11 Td (security)Tj 38.65 0 Td (training)Tj 38.1 0 Td (requirement.)Tj
-61.75 -11 Td (4.)Tj 13.78 0 Td (Each)Tj 27.43 0 Td (state)Tj 25.58 0 Td (agency)Tj 36.58 0 Td (shall)Tj 26.23 0 Td
(\(i\))Tj 15.88 0 Td (monitor)Tj 40.33 0 Td (and)Tj 21.38 0 Td (certify)Tj 34.13 0 Td (the)Tj 18.93 0 Td (training)Tj 39.68 0
Td (activity)Tj 38.43 0 Td (of)Tj 14.68 0 Td (its)Tj 15.87 0 Td (employees)Tj 52.42 0 Td (to)Tj 14.07 0 Td (ensure)Tj
-450.4 -11 Td (compliance)Tj 55.84 0 Td (with)Tj 24.79 0 Td (the)Tj 18.69 0 Td (annual)Tj 34.54 0 Td (information)Tj 57.14 0
Td (security)Tj 39.99 0 Td (training)Tj 39.44 0 Td (requirement,)Tj 61.04 0 Td (\(ii\))Tj 18.69 0 Td (evaluate)Tj 41.79 0 Td
(the)Tj 18.69 0 Td (efficacy)Tj 40.53 0 Td (of)Tj 14.43 0 Td (the)Tj
-465.6 -11 Td (information)Tj 57.49 0 Td (security)Tj 40.33 0 Td (training)Tj 39.78 0 Td (program,)Tj 45.58 0 Td
(and)Tj 21.48 0 Td (\(iii\))Tj 22.08 0 Td (forward)Tj 40.33 0 Td (to)Tj 14.18 0 Td (the)Tj 19.03 0 Td (CIO)Tj 24.48 0 Td
(such)Tj 25.73 0 Td (certification)Tj 58.58 0 Td (and)Tj 21.48 0 Td (evaluation,)Tj
-430.55 -11 Td (together)Tj 41.01 0 Td (with)Tj 24.56 0 Td (any)Tj 20.91 0 Td (suggestions)Tj 56.26 0 Td (for)Tj 17.86 0 Td
(improving)Tj 50.86 0 Td (the)Tj 18.46 0 Td (curriculum)Tj 53.21 0 Td (and)Tj 20.91 0 Td (materials,)Tj 47.96 0 Td
(or)Tj 14.21 0 Td (any)Tj 20.91 0 Td (other)Tj 27.61 0 Td (aspects)Tj 36.66 0 Td (of)Tj 14.21 0 Td (the)Tj
-465.6 -11 Td (training)Tj 38.84 0 Td (program.)Tj 44.64 0 Td (The)Tj 21.74 0 Td (CIO)Tj 23.54 0 Td (shall)Tj 25.39 0 Td
(consider)Tj 41.84 0 Td (such)Tj 24.79 0 Td (evaluations)Tj 54.64 0 Td (when)Tj 28.43 0 Td (it)Tj 10.78 0 Td (annually)Tj
42.48 0 Td (updates)Tj 38.18 0 Td (its)Tj 15.03 0 Td (curriculum)Tj 52.83 0 Td (and)Tj
-463.15 -11 Td (materials.)Tj
/F236 11 Tf 15 -11 Td (§)Tj 8.25 0 Td (2.2)Tj
/F36 11 Tf (-)Tj
/F236 11 Tf (5514.1.)Tj 54.35 0 Td (Prohibited)Tj 51.5 0 Td (applications)Tj 58.85 0 Td (and)Tj 21.05 0 Td (websites.)Tj
/F234 11 Tf -194 -11 Td (A.)Tj 13.4 0 Td (For)Tj 20.4 0 Td (the)Tj 17.35 0 Td (purposes)Tj 43.55 0 Td (of)Tj 12.5 0 Td
(this)Tj 19.8 0 Td (section,)Tj 37.75 0 Td (unless)Tj 31.35 0 Td (the)Tj 17.35 0 Td (context)Tj 35.6 0 Td (requires)Tj 40.45 0
Td (a)Tj 9.45 0 Td (different)Tj 41.1 0 Td (meaning:)Tj
-340.05 -11 Td ("ByteDance)Tj 58.43 0 Td (Ltd.")Tj 27.78 0 Td (means)Tj 33.78 0 Td (the)Tj 19.18 0 Td (Chinese)Tj 41.08 0 Td
(internet)Tj 39.88 0 Td (technology)Tj 53.93 0 Td (company)Tj 45.38 0 Td (founded)Tj 41.18 0 Td (by)Tj 16.13 0 Td
(Zhang)Tj 33.88 0 Td (Yiming)Tj 36.87 0 Td (and)Tj
-462.5 -11 Td (Liang)Tj 29.6 0 Td (Rubo)Tj 27.15 0 Td (in)Tj 12.5 0 Td (2012,)Tj 28.7 0 Td (and)Tj 20.45 0 Td (any)Tj 19.8 0
Td (successor)Tj 46.5 0 Td (company)Tj 43.55 0 Td (or)Tj 13.7 0 Td (entity)Tj 28.3 0 Td (owned)Tj 32.6 0 Td (by)Tj 14.3 0 Td
(such)Tj 24.05 0 Td (company.)Tj
-326.2 -11 Td ("Public)Tj 37.2 0 Td (body")Tj 29.9 0 Td (means)Tj 31.95 0 Td (the)Tj 17.35 0 Td (same)Tj 26.45 0 Td
(as)Tj 13.7 0 Td (that)Tj 21.05 0 Td (term)Tj 24 0 Td (is)Tj 11.25 0 Td (defined)Tj 36.25 0 Td (in)Tj 12.5 0 Td (§)Tj 9.45 0
Td (2.2)Tj
/F34 11 Tf (-)Tj
/F234 11 Tf (5514.)Tj
-271.05 -11 Td ("Tencent)Tj 43.37 0 Td (Holdings)Tj 44.32 0 Td (Ltd.")Tj 26.07 0 Td (means)Tj 32.07 0 Td (the)Tj 17.47 0 Td
(Chinese)Tj 39.37 0 Td (multinational)Tj 63.27 0 Td (technology)Tj 52.22 0 Td (and)Tj 20.57 0 Td (entertainment)Tj 64.97 0 Td
(conglomerate)Tj
-418.7 -11 Td (and)Tj 21.51 0 Td (holding)Tj 38.61 0 Td (company)Tj 44.61 0 Td (headquartered)Tj 69.61 0 Td (in)Tj 13.56 0 Td
(Shenzhen,)Tj 49.21 0 Td (China,)Tj 34.61 0 Td (and)Tj 21.51 0 Td (any)Tj 20.86 0 Td (successor)Tj 47.56 0 Td (company)Tj 44.6
0 Td (or)Tj 14.75 0 Td (entity)Tj 29.35 0 Td (owned)Tj
-450.35 -11 Td (by)Tj 14.3 0 Td (such)Tj 24.05 0 Td (company.)Tj
-23.35 -11 Td ("TikTok")Tj 43.92 0 Td (means)Tj 32.27 0 Td (the)Tj 17.67 0 Td (video)Tj
/F34 11 Tf (-)Tj
/F234 11 Tf (sharing)Tj 65.22 0 Td (application)Tj 54.31 0 Td (developed)Tj 48.71 0 Td (by)Tj 14.61 0 Td (ByteDance)Tj 52.31 0
Td (Ltd.)Tj 21.66 0 Td (that)Tj 21.36 0 Td (hosts)Tj 26.81 0 Td (user)Tj
/F34 11 Tf (-)Tj
/F234 11 Tf (submitted)Tj
-413.85 -11 Td (videos.)Tj
15 -11 Td ("WeChat")Tj 49.72 0 Td (means)Tj 33.17 0 Td (the)Tj 18.57 0 Td (multipurpose)Tj 63.07 0 Td (social)Tj 31.37 0 Td
(media,)Tj 34.72 0 Td (messaging,)Tj 54.22 0 Td (and)Tj 21.67 0 Td (payment)Tj 42.32 0 Td (application)Tj 55.21 0 Td
(developed)Tj 49.61 0 Td (by)Tj
-468.65 -11 Td (Tencent)Tj 38.65 0 Td (Holdings)Tj 44.2 0 Td (Ltd.)Tj
-67.85 -11 Td (B.)Tj 13.77 0 Td (Except)Tj 34.12 0 Td (as)Tj 14.07 0 Td (provided)Tj 43.32 0 Td (in)Tj 12.87 0 Td
(subsection)Tj 50.62 0 Td (C,)Tj 14.37 0 Td (no)Tj 15.32 0 Td (employee)Tj 45.67 0 Td (or)Tj 14.07 0 Td (agent)Tj 28.72 0 Td
(of)Tj 12.87 0 Td (any)Tj 20.16 0 Td (public)Tj 31.76 0 Td (body)Tj 25.66 0 Td (or)Tj 14.06 0 Td (person)Tj 34.16 0 Td
(or)Tj 14.06 0 Td (entity)Tj
-454.65 -11 Td (contracting)Tj 56.7 0 Td (with)Tj 25 0 Td (any)Tj 21.95 0 Td (such)Tj 26.2 0 Td (public)Tj 33.55 0 Td
(body)Tj 27.45 0 Td (shall)Tj 27.45 0 Td (download)Tj 49.45 0 Td (or)Tj 15.85 0 Td (use)Tj 20.69 0 Td (any)Tj 21.94 0 Td
(application,)Tj 58.89 0 Td (including)Tj 47.59 0 Td (TikTok)Tj 36.54 0 Td (or)Tj
-469.25 -11 Td (WeChat,)Tj 44.39 0 Td (or)Tj 16.04 0 Td (access)Tj 34.84 0 Td (any)Tj 22.14 0 Td (website)Tj 39.14 0 Td
(developed)Tj 50.74 0 Td (by)Tj 16.64 0 Td (ByteDance)Tj 54.34 0 Td (Ltd.)Tj 23.69 0 Td (or)Tj 16.04 0 Td (Tencent)Tj 40.99 0
Td (Holdings)Tj 46.54 0 Td (Ltd.)Tj 23.69 0 Td (\(i\))Tj 16.64 0 Td (on)Tj 17.29 0 Td (any)Tj
ET
Q
endstream
endobj
11 0 obj
18386
endobj
12 0 obj
<<
/Type /Page
/Parent 9 0 R
/Resources << /Font 5 0 R /ProcSet 3 0 R >>
/MediaBox [ 0 0 612 792 ]
/Contents 10 0 R
>>
endobj
13 0 obj
<<
/Length 14 0 R
>>
stream
q
BT
/F233 11 Tf 293.15 755.98 Td (3)Tj 8.25 0 Td (of)Tj 11.9 0 Td (3)Tj
/F234 11 Tf -240.32 -23 Td (government)Tj
/F34 11 Tf (-)Tj
/F234 11 Tf (issued)Tj 90.49 0 Td (device)Tj 35.64 0 Td (or)Tj 17.44 0 Td (government)Tj
/F34 11 Tf (-)Tj
/F234 11 Tf (owned)Tj 91.74 0 Td (or)Tj 17.44 0 Td (government)Tj
/F34 11 Tf (-)Tj
/F234 11 Tf (leased)Tj 91.09 0 Td (equipment,)Tj 56.13 0 Td (including)Tj 49.18 0 Td (mobile)Tj
-449.15 -11 Td (phones,)Tj 39.72 0 Td (desktop)Tj 39.37 0 Td (computers,)Tj 54.27 0 Td (laptop)Tj 33.97 0 Td (computers,)Tj
54.27 0 Td (tablets,)Tj 37.87 0 Td (or)Tj 15.62 0 Td (other)Tj 29.01 0 Td (devices)Tj 38.06 0 Td (capable)Tj 40.61 0 Td
(of)Tj 14.41 0 Td (connecting)Tj 54.01 0 Td (to)Tj 14.41 0 Td (the)Tj
-465.6 -11 Td (Internet,)Tj 44.77 0 Td (or)Tj 17.06 0 Td (\(ii\))Tj 20.71 0 Td (while)Tj 31.06 0 Td (connected)Tj 51.76 0 Td
(to)Tj 15.86 0 Td (any)Tj 23.16 0 Td (wired)Tj 32.26 0 Td (or)Tj 17.06 0 Td (wireless)Tj 43.16 0 Td (Internet)Tj 42.01 0 Td
(network)Tj 42.61 0 Td (owned,)Tj 38.71 0 Td (operated,)Tj 49.06 0 Td (or)Tj
-469.25 -11 Td (maintained)Tj 53.35 0 Td (by)Tj 14.3 0 Td (the)Tj 17.35 0 Td (Commonwealth.)Tj
-70 -11 Td (C.)Tj 14.24 0 Td (The)Tj 20.64 0 Td (Superintendent)Tj 70.64 0 Td (of)Tj 12.73 0 Td (State)Tj 26.13 0 Td
(Police)Tj 32.18 0 Td (or)Tj 13.93 0 Td (the)Tj 17.58 0 Td (chief)Tj 25.48 0 Td (law)Tj
/F34 11 Tf (-)Tj
/F234 11 Tf (enforcement)Tj 77.83 0 Td (officer)Tj 32.78 0 Td (of)Tj 12.73 0 Td (the)Tj 17.58 0 Td (appropriate)Tj 56.63 0 Td
(locality)Tj
-446.1 -11 Td (or)Tj 15.61 0 Td (institution)Tj 50.41 0 Td (of)Tj 14.41 0 Td (higher)Tj 34.51 0 Td (education)Tj 49.16 0 Td
(may)Tj 24.11 0 Td (grant)Tj 29.66 0 Td (an)Tj 16.86 0 Td (exception)Tj 47.86 0 Td (to)Tj 14.41 0 Td (the)Tj 19.26 0 Td
(provisions)Tj 51.56 0 Td (of)Tj 14.41 0 Td (subsection)Tj 52.16 0 Td (B)Tj 12.56 0 Td (for)Tj 18.65 0 Td (the)Tj
-465.6 -11 Td (purpose)Tj 39.46 0 Td (of)Tj 12.66 0 Td (allowing)Tj 42.56 0 Td (any)Tj 19.96 0 Td (employee,)Tj 48.21 0 Td
(agent,)Tj 31.26 0 Td (person,)Tj 36.71 0 Td (or)Tj 13.86 0 Td (entity)Tj 28.46 0 Td (to)Tj 12.66 0 Td (participate)Tj 52.25 0
Td (in)Tj 12.65 0 Td (any)Tj 19.95 0 Td (law)Tj
/F34 11 Tf (-)Tj
/F234 11 Tf (enforcement)Tj
/F34 11 Tf (-)Tj
/F234 11 Tf (related)Tj
-370.65 -11 Td (matters.)Tj
ET
Q
endstream
endobj
14 0 obj
2323
endobj
15 0 obj
<<
/Type /Page
/Parent 9 0 R
/Resources << /Font 5 0 R /ProcSet 3 0 R >>
/MediaBox [ 0 0 612 792 ]
/Contents 13 0 R
>>
endobj
16 0 obj
<<
/Type /Font
/Subtype /Type1
/Name /F33
/BaseFont /Times-Roman
>>
endobj
17 0 obj
<<
/Type /Font
/Subtype /Type1
/Name /F34
/BaseFont /Times-Italic
>>
endobj
18 0 obj
<<
/Type /Font
/Subtype /Type1
/Name /F35
/BaseFont /Times-Bold
>>
endobj
19 0 obj
<<
/Type /Font
/Subtype /Type1
/Name /F36
/BaseFont /Times-BoldItalic
>>
endobj
20 0 obj
<<
/Type /Font
/Subtype /Type1
/Name /F233
/BaseFont /Times-Roman
/Encoding /WinAnsiEncoding
>>
endobj
21 0 obj
<<
/Type /Font
/Subtype /Type1
/Name /F234
/BaseFont /Times-Italic
/Encoding /WinAnsiEncoding
>>
endobj
22 0 obj
<<
/Type /Font
/Subtype /Type1
/Name /F235
/BaseFont /Times-Bold
/Encoding /WinAnsiEncoding
>>
endobj
23 0 obj
<<
/Type /Font
/Subtype /Type1
/Name /F236
/BaseFont /Times-BoldItalic
/Encoding /WinAnsiEncoding
>>
endobj
9 0 obj
<<
/Type /Pages
/Count 3
/Kids [ 8 0 R 12 0 R 15 0 R ]
/Parent 24 0 R
>>
endobj
24 0 obj
<<
/Type /Pages
/Count 3
/Kids [ 9 0 R ]
/Parent 25 0 R
>>
endobj
25 0 obj
<<
/Type /Pages
/Count 3
/Kids [ 24 0 R ]
/Parent 26 0 R
>>
endobj
26 0 obj
<<
/Type /Pages
/Count 3
/Kids [ 25 0 R ]
/Parent 4 0 R
>>
endobj
4 0 obj
<<
/Type /Pages
/Count 3
/Kids [ 26 0 R ]
>>
endobj
5 0 obj
<< /F33 16 0 R /F34 17 0 R /F35 18 0 R /F36 19 0 R /F233 20 0 R /F234 21 0 R /F235 22 0 R /F236 23 0 R >>
endobj
2 0 obj
<<
/Type /Outlines
/Count 0
>>
endobj
xref
0 27
0000000000 65535 f
0000000094 00000 n
0000040443 00000 n
0000000166 00000 n
0000040252 00000 n
0000040319 00000 n
0000000213 00000 n
0000017710 00000 n
0000017734 00000 n
0000039906 00000 n
0000017876 00000 n
0000036323 00000 n
0000036348 00000 n
0000036492 00000 n
0000038876 00000 n
0000038900 00000 n
0000039044 00000 n
0000039136 00000 n
0000039229 00000 n
0000039320 00000 n
0000039417 00000 n
0000039538 00000 n
0000039660 00000 n
0000039780 00000 n
0000040002 00000 n
0000040085 00000 n
0000040169 00000 n
trailer
<<
/Size 27
/Root 1 0 R
/ID [ <90965e1116645bf9f03b608089d06370>
<90965e1116645bf9f03b608089d06370> ]
>>
startxref
40495
%%EOF