Search DGS

301 - 320 of 1848 Results

DISPOSITION OF DAMAGED SHIPMENTS

Chapter: 3800

Section: 3867

Carriers are almost always responsible for transit loss or damage. However, consignees have a legal responsibility for keeping damage costs at a minimum and must accept damaged freight that can be reasonably repaired. If the goods are damaged so much that they become almost worthless, you may refuse ...

https://www.dgs.ca.gov/Resources/SAM/TOC/3800/3867
INFORMATION SECURITY MONITORING

Chapter: 5300

Section: 5335

Policy: Each state entity is responsible for continuous monitoring of its networks and other information assets for signs of attack, anomalies, and suspicious or inappropriate activities. Each state entity shall ensure: 1. An event logging and monitoring strategy, which provides ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5335
COURIER AND OVERNIGHT DELIVERY SERVICE

Chapter: 3800

Section: 3837

Use the State's Master Service Agreements for overnight delivery of documents. This contract is managed by the DGS Procurement Division. For details see Master Service Agreements

https://www.dgs.ca.gov/Resources/SAM/TOC/3800/3837
SECURITY AND PRIVACY TRAINING RECORDS

Chapter: 5300

Section: 5320.3

Policy: Each state entity shall document and monitor individual information security and privacy training activities including basic security and privacy awareness training and specific information system security training; and retain individual training records to support corrective action, audit a ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5320-3
REMOTE ACCESS

Chapter: 5300

Section: 5360.1

Policy: Each entity shall establish and document allowed methods of remote access to its information systems; establish usage restrictions and implementation guidance for each allowed remote access method; and monitor the information asset for unauthorized remote access. Allowed methods shall comply ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5360-1
MEDIA DISPOSAL

Chapter: 5300

Section: 5365.3

Introduction: Sanitization techniques, including clearing, purging, and destruction, prevent the disclosure of information to unauthorized individuals when such media is reused or released for disposal. Sanitization of non-digital media include, but are not limited to, removing a classified appendix ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5365-3
ENDPOINT DEFENSE

Chapter: 5300

Section: 5355

Policy: Each state entity shall be responsible for protecting information on computers that routinely interact with untrusted devices on the internet or may be prone to loss or theft. Each state entity shall develop and implement capabilities, methods and techniques to manage processes and tools to: ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5355
CONTINUOUS MONITORING

Chapter: 5300

Section: 5335.1

Introduction: Continuous monitoring programs facilitate ongoing awareness of threats, vulnerabilities, and information security to support state entity risk management decisions. Policy: Each state entity shall develop a continuous monitoring strategy and implement a continuous monitoring program. I ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5335-1
TELECOMMUNICATIONS SERVICES

Chapter: 5300

Section: 5325.5

Policy: Each state entity shall ensure they have alternate telecommunications services including necessary agreements to permit the resumption of information asset operations for essential missions and business functions when the primary telecommunications capabilities are unavailable at either the ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5325-5
PHYSICAL SECURITY

Chapter: 5300

Section: 5365

Policy: Each state entity shall establish and implement physical security and environmental protection controls to safeguard information assets against unauthorized access, use, disclosure, disruption, modification, or destruction. Physical security and environmental controls shall include mana ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5365
INFORMATION SECURITY PROGRAM METRICS

Chapter: 5300

Section: 5305.9

Introduction: Performance with respect to security controls must be measured to determine whether the needs of the state entity are being met. Security metrics assist with adjustments to security controls in order to improve effectiveness. Policy: Each state entity shall establish outcome-ba ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5305-9
SPLIT PICKUP AND SPLIT DELIVERY SHIPMENTS

Chapter: 3800

Section: 3870

Sometimes you can get lower freight costs by consolidating small lots into split delivery or split pickup shipments. Take advantage of these freight savings whenever possible. See SAM Section 3801 for the PUC definitions of split pickups and deliveries. You must prepay all charges for split deliver ...

https://www.dgs.ca.gov/Resources/SAM/TOC/3800/3870
INFORMATION SECURITY COMPLIANCE

Chapter: 5300

Section: 5330

Policy: Each state entity shall validate compliance with statewide information security policy, standards, and procedures as set forth in this Chapter, and the state entity’s internal information security policies to verify that security measures are in place and functioning as intended. Each ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5330
INCIDENT HANDLING

Chapter: 5300

Section: 5340.3

Policy: Each state entity shall implement incident handling for information security and privacy incidents that includes preparation, detection and analysis, containment, eradication, and recovery. Incident handling shall coordinate with business continuity planning activities (SAM section 5325). In ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5340-3
LIMITING USE AND DISCLOSURE

Chapter: 5300

Section: 5310.3

Policy: Information asset owners, custodians and users shall not disclose, use, or make available personal information collected from individuals for purposes other than those for which it was originally collected, except in the following situations: The disclosure is made to the individual who is ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5310-3
INFORMATION SECURITY ROLES AND RESPONSIBILITIES

Chapter: 5300

Section: 5305.3

Policy: Information security is a shared responsibility. All personnel have a role and responsibility in the proper use and protection of state information assets. Each state entity shall ensure information security program roles and responsibilities identified in SIMM 5305-A are acknowledged and un ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5305-3
PERSONNEL MANAGEMENT

Chapter: 5300

Section: 5305.4

Policy: Each state entity must identify security and privacy roles and responsibilities for all personnel. This will ensure personnel are informed of their roles and responsibilities for using state entity information assets, to reduce the risk of inappropriate use, and a documented process to remov ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5305-4
SOFTWARE USAGE RESTRICTIONS

Chapter: 5300

Section: 5315.7

Policy: Each state entity shall ensure its Software Management Plan (SAM sections 4846.1 and 4846.2) addresses the following: Use of software and associated documentation in accordance with contract agreements and copyright laws; Enforcement of explicit rules governing the authorized installation ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5315-7
INFORMATION SECURITY PROGRAM

Chapter: 5300

Section: 5305

Policy: Each state entity is responsible for establishing an information security program. The program shall include planning, oversight, and coordination of its information security program activities to effectively manage risk, provide for the protection of information assets, and prevent illegal ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5305
GOVERNING PROVISIONS

Chapter: 5300

Section: 5300.2

Policy: As set forth in Government Code section 11549.3, state entities shall comply with the information security and privacy policies, standards and procedures issued by the California Information Security Office (CISO). In addition to compliance with the information security and privacy ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5300-2