Strategic Plan (PDF) - Cioarchives.ca.gov - State of California

Goals, Objectives, and ActionsThere are signifi cant interrelationships and dependencies between various departmentsregarding IT security—we are only as strong as our weakest link. Thus, it is critical for ourcollective protection that we ensure that each department in the State’s infrastructureexercises due diligence in IT security infrastructure and processes. Further, bydeveloping consensus in implementing IT security best business practices and technicalconfi gurations, individual departments will benefi t from design and implementationeconomies of scale.Actions1. By February 2007, the IT Council’s Security Committee will identify allexisting IT security groups and committees, and document the charter andstakeholders of each group.2. By March 2007, the SISO will develop and publish a document that outlines thegeneral roles and responsibilities assigned to an agency’s Information SecurityOffi cer (ISO).3. By June 2007, the IT Council’s Security Committee, working with the SISOand Agency Information Offi cers, will develop a recommended approach tostatewide IT security governance that covers executive, management, andtechnical roles.21