SB 272 Process SB 272 Process County became aware of SB 272 in October 2015 County Counsel CCISDA Data collection determined to be in the IS Department ISD domain County CIO sounded out the Project Portfolio Management Office PMO ID: 679182
Download Presentation The PPT/PDF document "1 County of Santa Clara" is the property of its rightful owner. Permission is granted to download and print the materials on this web site for personal, non-commercial use only, and to display it on your personal computer provided you do not modify the materials and that you retain all copyright notices contained in the materials. By downloading content from our website, you accept the terms of this agreement.
![&#x/Att;¬he;
[/; ott;&#xom ];&#x/BBo;&#xx [2;.1;„](https://thumbs.docslides.com/131248/x-att-xache-xd-xbott-xom-x-bbo-xx-2-x9-581.jpg)
Slide1
1
County of Santa Clara
SB 272 Process Slide2
SB 272 Process
County became aware of SB 272 in October 2015
County Counsel, CCISDA Data collection determined to be in the IS Department (ISD) domainCounty CIO sounded out the Project Portfolio Management Office (PMO).PMO manager assigned a Senior IT Project
M
anager.
Communication sent to department/agency headsCIO sent email in March with deadline to provide data by April.Reminder sent in May.
2Slide3
SB 272 Process
THE EMAIL THAT WAS SENT:
Provide data in the attached template for your departmental/agency systems that meet both of these criteria:Contain any information collected about the public; and Serve as an original source of data within the department/agency.Omit from the list any of the following:
Information technology security systems, including firewalls and other cybersecurity systems.
Physical access control systems, employee identification management systems, video monitoring, and other physical control systems.
Infrastructure and mechanical control systems, including those that control or manage street lights, electrical, natural gas, or water or sewer functions.Systems related to 911 dispatch and operation or emergency services.System disclosure would reveal vulnerabilities to, or otherwise increase the potential for an attack on, any information technology system of the County.3Slide4
SB 272 Process
THE TEMPLATE ATTACHED TO THE EMAIL:
4Slide5
SB 272 Process
Questions raised by Agencies/Departments:
Who decides what systems to list?Do all enterprise systems have to be listed?
Does an Excel spreadsheet or Word document have to be listed?
What data types have to be listed?
What is an original source of data?
5Slide6
SB 272 Process
Agencies/Departments provided data via two channels
Directly sent to the PMOutreach by ISD Business Relationship Management (BRM) division. BRM team’s core mission is to ensure that departments get maximum value from the County’s IT investments. PM collated data, prepared catalog and forwarded to ISD Security division
Data reviewed by County Chief Information Security Officer (CISO)
PM forwarded catalog to County Counsel
County Counsel in the process of getting management approval.
6Slide7
We’re almost there!
7
Board of Supervisors to approve Resolution designating ISD to post the catalog (at its June 21st
meeting)
Enterprise Content Management (ECM) division SharePoint team to upload file on the County public web site (sccgov.org)