7735282, 71A-1.001 - Florida Administrative Rules, Law, Code, Register

Home

Florida Department of State and Division of Library and Information Services

Notice: 7735282

Notice of Development of Rulemaking

Department:

AGENCY FOR ENTERPRISE INFORMATION TECHNOLOGY

Division:

Office of Information Security

Chapter:

FLORIDA INFORMATION TECHNOLOGY RESOURCE SECURITY POLICIES AND STANDARDS

Overview

RULE:

71A-1.001	Purpose and Scope (Repealed)
71A-1.002	Definitions (Repealed)
71A-1.003	Agency Information Security Program (Repealed)
71A-1.004	Agency Information Technology Workers (Repealed)
71A-1.005	Agency Contracts, Providers, and Partners (Repealed)
71A-1.006	Confidential and Exempt Information (Repealed)
71A-1.007	Access Control (Repealed)
71A-1.008	Awareness and Training (Repealed)
71A-1.009	Audit and Accountability (Repealed)
71A-1.010	Certification, Accreditation, and Security Assessments (Repealed)
71A-1.011	Configuration Management (Repealed)
71A-1.012	Contingency Planning (Repealed)
71A-1.013	Identification and Authentication (Repealed)
71A-1.014	Incident Response (Repealed)
71A-1.015	Maintenance (Repealed)
71A-1.016	Media Protection (Repealed)
71A-1.017	Physical and Environmental Protection (Repealed)
71A-1.018	System and Application Security Planning (Repealed)
71A-1.019	Personnel Security and Acceptable Use (Repealed)
71A-1.020	Risk Assessment (Repealed)
71A-1.021	Systems, Applications and Services Acquisition and Development (Repealed)
71A-1.022	Systems and Communications Protection (Repealed)
71A-1.023	System and Information Integrity (Repealed)

PURPOSE:

The purpose of the proposed new rule Chapter 71A-1, F.A.C., to be known as the Florida Information Technology Resource Security Policies and Standards, is to:
1. Document a framework of information security policies and practices for state agencies in order to safeguard the confidentiality, integrity, and availability of Florida government data and information technology resources.
2. Define minimum standards to be used by state agencies to categorize information and information technology resources based on the objectives of providing appropriate levels of information security according to risk levels.
3. Define minimum management, operational and technical security controls to be used by state agencies to secure information and information technology resources.
Chapter 60DD-2, F.A.C. will be repealed; proposed Rule Chapter 71A-1, F.A.C., if adopted, is intended to replace Rule Chapter 60DD-2, F.A.C.

SUBJECT:

Information Security Policies and Standards.

RULEMAKING AUTHORITY:

282.318(5) FS.

LAW:

282.318(5) FS.

PRINT PUBLISH DATE:

10/9/2009 Vol. 35/40

RELATED STATUTES
AND LAWS:

282.318(5) FS., 282.318(5) FS.

OVERSIGHT COMMITTEE:

Joint Administrative Procedures Committee
Florida Administrative Law Central Online Network (F.A.L.C.O.N.)

RELATED COURT CASES:

Division of Administrative Hearings

FEDERAL eRULEMAKING
WEB PORTAL:

Regulations.gov

HOW TO LINK TO
THIS NOTICE:

http://flrules.org/gateway/ruleno.asp?id=71A-1.001&PDate=10/9/2009&Section=1

REFERENCE MATERIALS:

No reference(s).

Under Florida law, E-mail addresses are public records. If you do not want your E-mail address released in response to a public records request, do not send electronic mail to this entity. Instead, contact this office by phone or in writing.