Nevada Revised Statutes Title 17. State Legislative Department § 218G.135. Duty to protect security of information systems; duty to report vulnerabilities in such systems

1. A report of an audit conducted by the Legislative Auditor must not contain any information that the Legislative Auditor determines could potentially expose this State to a breach of the security of an information system of an agency of this State.

2. If the Legislative Auditor discovers, in the course of an audit, a vulnerability in an information system of an agency of the State that the Legislative Auditor determines poses a serious threat to the security of the information system, the Legislative Auditor shall report the vulnerability immediately to the Governor, the Chair of the Legislative Commission, the Chair of the Audit Subcommittee and the head of the agency affected.

3. As used in this section, “information system” has the meaning ascribed to it in NRS 242.057.