The Agency for State Technology (AST) proposes the repeal of Rules 71A-1.001, 71A-1.002, 71A-1.003, 71A-1.004, 71A-1.005, 71A-1.006, 71A-1.007, 71A-1.008, 71A-1.009, 71A-1.010, 71A-1.011, 71A-1.012, 71A-1.013, 71A-1.014, 71A-1.015, 71A-1.016, 71A-1....

AGENCY FOR ENTERPRISE INFORMATION TECHNOLOGY
Office of Information Security
RULE NOS.:RULE TITLES:
71A-1.001Purpose and Scope
71A-1.002Definitions
71A-1.003Agency Information Security Program
71A-1.004Agency Information Technology Workers
71A-1.005Agency Contracts, Providers, and Partners
71A-1.006Confidential and Exempt Information
71A-1.007Access Control
71A-1.008Awareness and Training
71A-1.009Audit and Accountability
71A-1.010Certification, Accreditation, and Security Assessments
71A-1.011Configuration Management
71A-1.012Contingency Planning
71A-1.013Identification and Authentication
71A-1.014Incident Response
71A-1.015Maintenance
71A-1.016Media Protection
71A-1.017Physical and Environmental Protection
71A-1.018System and Application Security Planning
71A-1.019Personnel Security and Acceptable Use
71A-1.020Risk Assessment
71A-1.021Systems, Applications and Services Acquisition and Development
71A-1.022Systems and Communications Protection
71A-1.023System and Information Integrity
PURPOSE AND EFFECT: The Agency for State Technology (AST) proposes the repeal of Rules 71A-1.001, 71A-1.002, 71A-1.003, 71A-1.004, 71A-1.005, 71A-1.006, 71A-1.007, 71A-1.008, 71A-1.009, 71A-1.010, 71A-1.011, 71A-1.012, 71A-1.013, 71A-1.014, 71A-1.015, 71A-1.016, 71A-1.017, 71A-1.018, 71A-1.019, 71A-1.020, 71A-1.021, 71A-1.022, and 71A-1.023, F.A.C., as these rules are duplicative of the Agency’s newly adopted rules, Rules 74-2.001, F.A.C., through 74-2.006, F.A.C., the Florida Cybersecurity Standards.
SUMMARY: Rule Chapter 71A-1, Florida Administrative Code, was transferred to AST by operation of Chapter 2014-221, Section 1, Laws of Florida. AST proposes repeal of Rules 71A-1.001, 71A-1.002, 71A-1.003, 71A-1.004, 71A-1.005, 71A-1.006, 71A-1.007, 71A-1.008, 71A-1.009, 71A-1.010, 71A-1.011, 71A-1.012, 71A-1.013, 71A-1.014, 71A-1.015, 71A-1.016, 71A-1.017, 71A-1.018, 71A-1.019, 71A-1.020, 71A-1.021, 71A-1.022, and 71A-1.023, F.A.C., as they are duplicative of the AST’s newly adopted rules, Rules 74-2.001, F.A.C., through 74-2.006, F.A.C., the Florida Cybersecurity Standards.
SUMMARY OF STATEMENT OF ESTIMATED REGULATORY COSTS AND LEGISLATIVE RATIFICATION: The Agency has determined that this will not have an adverse impact on small business or likely increase directly or indirectly regulatory costs in excess of $200,000 in the aggregate within one year after the implementation of the rule. A SERC has not been prepared by the Agency.
Repeal of this rule will have no economic impact.
Any person who wishes to provide information regarding a statement of estimated regulatory costs, or provide a proposal for a lower cost regulatory alternative must do so in writing within 21 days of this notice.
RULEMAKING AUTHORITY: 282.318(5) FS.
LAW IMPLEMENTED: 282.318(3) FS.
IF REQUESTED WITHIN 21 DAYS OF THE DATE OF THIS NOTICE, A HEARING WILL BE SCHEDULED AND ANNOUNCED IN THE FAR.
THE PERSON TO BE CONTACTED REGARDING THE PROPOSED RULE IS: Gerard York, Senior Attorney, Agency for State Technology, 2585 Shumard Oak Blvd., Tallahassee, Florida 32311, (850)488-9377, gerard.york@ast.myflorida.com

THE FULL TEXT OF THE PROPOSED RULE IS:

71A-1.001 Purpose and Scope (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.002 Definitions (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.003 Agency Information Security Program (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.004 Agency Information Technology Workers (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.005 Agency Contracts, Providers, and Partners (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.006 Confidential and Exempt Information (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.007 Access Control (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.008 Awareness and Training (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.009 Audit and Accountability (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.010 Certification, Accreditation, and Security Assessments (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.011 Configuration Management (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.012 Contingency Planning (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.013 Identification and Authentication (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.014 Incident Response (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.015 Maintenance (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.016 Media Protection (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.017 Physical and Environmental Protection (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.018 System and Application Security Planning (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.019 Personnel Security and Acceptable Use (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.020 Risk Assessment (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.021 Systems, Applications, and Services Acquisition and Development (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.022 System and Communications Protection (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

71A-1.023 System and Information Integrity (Repealed)
Rulemaking Authority 14.204(7), 282.318(3), 282.318(6), FS. Law Implemented s. 12, Ch. 2009-80, L.O.F. History – New 11-15-10, Repealed           .

NAME OF PERSON ORIGINATING PROPOSED RULE: Danielle Alvarez, Chief Information Security Officer
NAME OF AGENCY HEAD WHO APPROVED THE PROPOSED RULE: Jason Allison, Executive Director
DATE PROPOSED RULE APPROVED BY AGENCY HEAD: March 14, 2016

Document Information

Comments Open:: 3/18/2016
Summary:: Rule Chapter 71A-1, Florida Administrative Code, was transferred to AST by operation of Chapter 2014-221, Section 1, Laws of Florida. AST proposes repeal of Rules 71A-1.001, 71A-1.002, 71A-1.003, 71A-1.004, 71A-1.005, 71A-1.006, 71A-1.007, 71A-1.008, 71A-1.009, 71A-1.010, 71A-1.011, 71A-1.012, 71A-1.013, 71A-1.014, 71A-1.015, 71A-1.016, 71A-1.017, 71A-1.018, 71A-1.019, 71A-1.020, 71A-1.021, 71A-1.022, and 71A-1.023, F.A.C., as they are duplicative of the AST’s newly adopted rules, Rules 74-2....
Purpose:: The Agency for State Technology (AST) proposes the repeal of Rules 71A-1.001, 71A-1.002, 71A-1.003, 71A-1.004, 71A-1.005, 71A-1.006, 71A-1.007, 71A-1.008, 71A-1.009, 71A-1.010, 71A-1.011, 71A-1.012, 71A-1.013, 71A-1.014, 71A-1.015, 71A-1.016, 71A-1.017, 71A-1.018, 71A-1.019, 71A-1.020, 71A-1.021, 71A-1.022, and 71A-1.023, F.A.C., as these rules are duplicative of the Agency’s newly adopted rules, Rules 74-2.001, F.A.C., through 74-2.006, F.A.C., the Florida Cybersecurity Standards.
Rulemaking Authority:: 282.318(5) FS.
Law:: 282.318(3) FS.
Contact:: Gerard York, Senior Attorney, Agency for State Technology, 2585 Shumard Oak Blvd., Tallahassee, Florida 32311, (850)488-9377; gerard.york@ast.myflorida.com
Related Rules: (15): 71A-1.001. Purpose and Scope; 71A-1.002. Definitions; 71A-1.003. Agency Information Security Program; 71A-1.004. Agency Information Technology Workers; 71A-1.005. Agency Contracts, Providers, and Partners; More ...