Colorado Revised Statutes Title 24. Government State § 24-37.5-404. Public agencies--information security plans

(1) On or before July 1 of each year, in accordance with the rules promulgated by the office in support of this part 4, each public agency shall develop an information security plan utilizing the information security policies, standards, and guidelines developed by the chief information security officer. The information security plan shall provide information security for the communication and information resources that support the operations and assets of the public agency.

(2) The information security plan shall include:

(3) On or before July 15 of each year, each public agency shall submit the information security plan developed pursuant to this section to the chief information security officer for approval.

(4) In the event that a public agency fails to submit to the chief information security officer an information security plan on or before July 15 of each year or such plan is disapproved by the chief information security officer, the officer shall notify the governor, the chief information officer, and the head of the public agency of noncompliance with this section. If no plan has been approved by September 15 of each year, the chief information security officer shall be authorized to temporarily discontinue or suspend the operation of a public agency's communication and information resources until such plan has been submitted to or is approved by the officer.

(5) Deleted by Laws 2011, Ch. 128, § 7, eff. April 22, 2011.

(6) Deleted by Laws 2011, Ch. 128, § 7, eff. April 22, 2011.