Learn About the Law
Get help with your legal needs
FindLaw’s Learn About the Law features thousands of informational articles to help you understand your options. And if you’re ready to hire an attorney, find one in your area who can help.
Current as of January 01, 2022 | Updated by FindLaw Staff
(a) The general assembly recognizes that the security of government computer systems is essential to ensuring the stability and integrity of vital information gathered and stored by the government for the benefit of the citizenry and the breach of security over computer systems presents a risk to the health, safety, and welfare of the public. It is the intent of the legislature to ensure that government computer systems and information residing on these systems are protected from unauthorized access, compromise, sabotage, hacking, viruses, destruction, illegal use, cyber attack, or any other act that might jeopardize or harm the computer systems and the information stored on them.
(b) In conjunction with the powers and duties outlined in this chapter, the office of internal audit may conduct reviews and assessments of the various government computer systems and the security systems established to safeguard these computer systems. Computer systems subject to this section shall include systems that pertain to federal, state, or local programs, and quasi-governmental bodies, and the computer systems of any entity or program that is subject to audit by the office of internal audit. The office of internal audit's review may include an assessment of system vulnerability, network penetration, potential security breaches, and susceptibility to cyber attack and cyber fraud.
(c) The office of internal audit's findings shall be deemed public records and available for public inspection; provided, however, in the event the review indicates a computer system is vulnerable, or security over the system is otherwise deficient, reasonably segregable portions of the findings shall be subject to public inspection after the redaction of any information, the disclosure of which, would endanger the security of the system or reveal the specific nature of the vulnerabilities found. Notwithstanding any other provision of law to the contrary, the work papers developed in connection with the review of computer systems and the security over those systems authorized by this section shall not be deemed public records and are not subject to disclosure.
(d) In order to maintain the integrity of the computer system, the office of internal audit may procure the services of specialists in information security systems or other contractors deemed necessary in conducting reviews under this section, and in procuring those services shall be exempt from the requirements of the state purchasing law or regulation.
(e) Any outside contractor or vendor hired to provide services in the review of the security of a computer system shall be bound by the confidentiality provisions of this section.
Cite this article: FindLaw.com - Rhode Island General Laws Title 35. Public Finance § 35-7-15. Audit of information security systems - last updated January 01, 2022 | https://codes.findlaw.com/ri/title-35-public-finance/ri-gen-laws-sect-35-7-15/
FindLaw Codes may not reflect the most recent version of the law in your jurisdiction. Please verify the status of the code you are researching with the state legislature or via Westlaw before relying on it for your legal needs.
A free source of state and federal court opinions, state laws, and the United States Code. For more information about the legal concepts addressed by these cases and statutes, visit FindLaw's Learn About the Law.
Get help with your legal needs
FindLaw’s Learn About the Law features thousands of informational articles to help you understand your options. And if you’re ready to hire an attorney, find one in your area who can help.
Search our directory by legal issue
Enter information in one or both fields (Required)