Information security.

Existing law establishes the Department of Technology within the Government Operations Agency, headed by the Director of Technology, who is also known as the State Chief Information Officer. Existing law requires the chief to establish an information security program, including, among other things, the creation, updating, and publishing of information security and privacy policies, standards, and procedures the State Administrative Manual. Existing law requires certain state entities to implement and comply with the policies and procedures issued by the office. This bill would revise the implementation requirement described above to provide that all state agencies, as defined, must implement and comply with the policies and procedures issued by the office.