§ 147-33.110. Statewide security standards. - North Carolina Statutes

Part 5. Security for InformationTechnology Services.

§ 147‑33.110.  Statewidesecurity standards.

The State Chief InformationOfficer shall establish a statewide set of standards for information technologysecurity to maximize the functionality, security, and interoperability of theState's distributed information technology assets, including communications andencryption technologies. The State CIO shall review and revise the securitystandards annually. As part of this function, the State Chief InformationOfficer shall review periodically existing security standards and practices inplace among the various State agencies to determine whether those standards andpractices meet statewide security and encryption requirements. The State ChiefInformation Officer may assume the direct responsibility of providing for theinformation technology security of any State agency that fails to adhere tosecurity standards adopted under this Article. Any actions taken by the StateChief Information Officer under this section shall be reported to theInformation Technology Advisory Board at its next scheduled meeting. (2001‑424, s. 15.2(b);2004‑129, ss. 12, 14.)