North Carolina General Statutes § 147-33.112 Assessment of agency compliance with security standards

The State Chief Information Officer shall assess periodically the ability of each agency and each agency's contracted vendors to comply with the current security enterprise-wide set of standards established pursuant to this section. The assessment shall include, at a minimum, the rate of compliance with the enterprise-wide security standards and an assessment of security organization, security practices, security industry standards, network security architecture, and current expenditures of State funds for information technology security. The assessment of an agency shall also estimate the cost to implement the security measures needed for agencies to fully comply with the standards. Each agency subject to the standards shall submit information required by the State Chief Information Officer for purposes of this assessment. The State Chief Information Officer shall include the information obtained from the assessment in the State Information Technology Plan required under G.S. 147-33.72B.

The State Chief Information Officer shall assess the ability of each agency to comply with the current security enterprise-wide set of standards established pursuant to this section. The assessment shall include, at a minimum, the rate of compliance with the standards in each agency and an assessment of each agency's security organization, network security architecture, and current expenditures for information technology security. The assessment shall also estimate the cost to implement the security measures needed for agencies to fully comply with the standards. Each agency subject to the standards shall submit information required by the State Chief Information Officer for purposes of this assessment. The State Chief Information Officer shall include the information obtained from the assessment in the State Information Technology Plan required under G.S. 147-33.72B. (2003-153, s. 1(a); 2004-129, ss. 12, 14; 2013-188, s. 6.)

Sections:  Previous  147-33.100  147-33.101  147-33.102  147-33.103  147-33.104A  147-33.110  147-33.111  147-33.112  147-33.113  147-33.120  147-33.121  147-33.122  147-33.123  147-34  147-35  Next

Last modified: March 23, 2014