Search DGS

181 - 200 of 1848 Results

RISK MANAGEMENT

Chapter: 5300

Section: 5305.6

Policy: Each state entity shall create a state entity-wide information security, privacy and risk management strategy which includes a clear expression of risk tolerance for the organization, acceptable risk assessment methodologies, risk mitigation strategies, and a process for consistently evaluat ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5305-6
ALLOCATION OF COSTS – INTRODUCTION

Chapter: 9200

Section: 9200

Renumbered to 9213.

https://www.dgs.ca.gov/Resources/SAM/TOC/9200/9200
BUSINESS CONTINUITY WITH TECHNOLOGY RECOVERY

Chapter: 5300

Section: 5325

Introduction: The entire concept of business continuity is based on the identification of all business functions and critical infrastructure within a state entity in order to assign a level of importance to each business function and infrastructure (including critical infrastructure). A business imp ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5325
ALLOCATION OF COSTS – INTRODUCTION

Chapter: 9200

Section: 9213

(Revised and renumbered from 9200) This section provides the definition, methodology, and required documentation for the allocation of agency/department costs to their program budgets. Allocation is the process of assigning and distributing a cost or group of costs to one or more cost objectives i ...

https://www.dgs.ca.gov/Resources/SAM/TOC/9200/9213
ARRANGEMENT OF CHAPTER

Chapter: 5300

Section: 5300.1

This Chapter and its corresponding sections are organized as follows: Introduction: A brief description introducing the section, when necessary. Policy: A clear and unambiguous “Policy” statement which directs state entities at a high level as to required actions and outcomes. Governing ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5300-1
NON-FEDERAL RECOVERIES - COST ACCOUNTING

Chapter: 9200

Section: 9217.3

(Revised and renumbered from 8792) Agencies/departments will account for the cost of maintaining individual structures, wards, etc. instead of cost accounting by organizational units only after carefully determining that the benefits of doing so outweigh the cost. This can be accomplished by use of ...

https://www.dgs.ca.gov/Resources/SAM/TOC/9200/9217-3
TECHNOLOGY RECOVERY PLAN

Chapter: 5300

Section: 5325.1

Introduction: The Technology Recovery Plan (TRP) is a sub-set of the Agency/state entity’s Business Continuity Plan. The TRP is activated immediately after a disaster strikes and focuses on getting critical systems back online. Policy: Each Agency/state entity shall develop a ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5325-1
NON-FEDERAL RECOVERIES - INTERAGENCY SERVICES

Chapter: 9200

Section: 9217.1

(Revised and renumbered from 8758) Charges for interagency services will include the same cost elements that are included in charges for services to other than state agencies/departments (e.g. direct costs, indirect costs, and central service costs) as prescribed in SAM section 9213.

https://www.dgs.ca.gov/Resources/SAM/TOC/9200/9217-1
STATE ENTITY PRIVACY STATEMENT AND NOTICE ON COLLECTION

Chapter: 5300

Section: 5310.1

Policy: Information asset owners shall be open about state entity information handling practices, including the purposes for which the state entity collects, uses, and discloses personal information of individuals. Each state entity Privacy Program Coordinator shall prepare, publish, and maintain a ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5310-1
CENTRAL SERVICE COSTS RECOVERY–RECOVERIES THROUGH SWCAP

Chapter: 9200

Section: 9215.2

(Revised and renumbered from 8755) The Statewide Cost Allocation Plan (SWCAP), like Pro Rata, is a "fair share" distribution of central service costs. SWCAP includes only those central services costs which are allowable for federal reimbursement purposes. In the fall of each year, the Department of ...

https://www.dgs.ca.gov/Resources/SAM/TOC/9200/9215-2
SECURITY ASSESSMENTS

Chapter: 5300

Section: 5330.1

Policy: Each state entity shall perform security assessments to determine whether the security controls selected by the state entity are implemented correctly and working as intended to mitigate risk. Security assessments conducted by the state entity shall include, but are not limited to, the follo ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5330-1
CENTRAL SERVICE COSTS RECOVERY–RECOVERIES THROUGH PRO RATA

Chapter: 9200

Section: 9215.1

(Revised and renumbered from 8754) General Administrative Costs are commonly referred to as Pro Rata. As mentioned in SAM section 9215, Pro Rata is the sharing of central service costs by funds other than the General Fund and the Central Service Cost Recovery Fund (CSCRF). The cost of each central s ...

https://www.dgs.ca.gov/Resources/SAM/TOC/9200/9215-1
INFORMATION SECURITY INTEGRATION

Chapter: 5300

Section: 5315

Policy: Each state entity is responsible for the integration of information security and privacy within the organization. This includes, but is not limited to, the designing of appropriate security controls in new systems, or systems that are undergoing substantial redesign, including both in-house ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5315
RATE DETERMINED BY PERSONAL SERVICES AND/OR TOTAL COSTS

Chapter: 9200

Section: 9202.1

Deleted; consolidated under section 9213.1.

https://www.dgs.ca.gov/Resources/SAM/TOC/9200/9202-1
SYSTEM AND SERVICES ACQUISITION

Chapter: 5300

Section: 5315.1

Policy: Each state entity shall determine the information security requirements (confidentiality, integrity, and availability) for its information assets in mission/business process planning; determine, document and allocate the resources required to protect the information assets as part of its cap ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5315-1
COST ALLOCATION PROCESS

Chapter: 9200

Section: 9204

Renumbered to 9213.2.

https://www.dgs.ca.gov/Resources/SAM/TOC/9200/9204
MINIMUM SECURITY CONTROLS

Chapter: 5300

Section: 5300.5

Policy: California has adopted the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 as minimum information security control requirements to support implementation and compliance with the Federal Information Processing Standards (FIPS). Each state entity shall use ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5300-5
TIME REPORTING

Chapter: 9200

Section: 9205

Renumbered to 9213.3.

https://www.dgs.ca.gov/Resources/SAM/TOC/9200/9205
INCIDENT RESPONSE TESTING

Chapter: 5300

Section: 5340.2

Introduction: Incident response testing includes an assessment of the effects on state entity operations (e.g., reduction in mission capabilities), state entity assets, and individuals due to incident response, and involves the use of checklists, walk-through or tabletop exercises, and simulations t ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5340-2
ALLOCATION OF COSTS - TIME REPORTING

Chapter: 9200

Section: 9213.3

(Revised and renumbered from 9205) Time may be reported by one or more of the following methods: Continuous Positive Time Reporting The employee prepares a time report in which they identify how they used all of their time during the period. Continuous Exception Time Reporting The emp ...

https://www.dgs.ca.gov/Resources/SAM/TOC/9200/9213-3