Purpose and Scope, Definitions, Agency Information Security Program, Agency Information Technology Workers, Agency Contracts, Providers, and Partners, Confidential and Exempt Information, Access Control, Awareness and Training, Audit and ...

 

AGENCY FOR ENTERPRISE INFORMATION TECHNOLOGY

Office of Information Security

RULE NOS.:RULE TITLES:

71A-1.001Purpose and Scope

71A-1.002Definitions

71A-1.003Agency Information Security Program

71A-1.004Agency Information Technology Workers

71A-1.005Agency Contracts, Providers, and Partners

71A-1.006Confidential and Exempt Information

71A-1.007Access Control

71A-1.008Awareness and Training

71A-1.009Audit and Accountability

71A-1.010Certification, Accreditation, and Security Assessments

71A-1.011Configuration Management

71A-1.012Contingency Planning

71A-1.013Identification and Authentication

71A-1.014Incident Response

71A-1.015Maintenance

71A-1.016Media Protection

71A-1.017Physical and Environmental Protection

71A-1.018System and Application Security Planning

71A-1.019Personnel Security and Acceptable Use

71A-1.020Risk Assessment

71A-1.021Systems, Applications and Services Acquisition and Development

71A-1.022Systems and Communications Protection

71A-1.023System and Information Integrity

NOTICE OF CORRECTION

Notice is hereby given that the following correction has been made to the proposed rule in Vol. 42 No. 54, March 18, 2016 issue of the Florida Administrative Register.

The Summary of Statement of Estimated Regulatory Costs and Legislative Ratification should have stated as follows:

SUMMARY OF STATEMENT OF ESTIMATED REGULATORY COSTS AND LEGISLATIVE RATIFICATION: The Agency has determined that this repeal will not have an adverse impact on small business or likely increase directly or indirectly regulatory costs in excess of $200,000 in the aggregate within one year after the implementation of the rule. A SERC has not been prepared by the Agency.

The Agency has determined that the proposed rule repeal is not expected to require legislative ratification based on the statement of estimated regulatory costs or, if no SERC is required, the information expressly relied upon and described herein: The economic review conducted by the Agency.

Any person who wishes to provide information regarding a statement of estimated regulatory costs, or provide a proposal for a lower cost regulatory alternative must do so in writing within 21 days of this notice.