Search DGS

361 - 380 of 1848 Results

SECURITY ASSESSMENTS

Chapter: 5300

Section: 5330.1

Policy: Each state entity shall perform security assessments to determine whether the security controls selected by the state entity are implemented correctly and working as intended to mitigate risk. Security assessments conducted by the state entity shall include, but are not limited to, the follo ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5330-1
COMPLIANCE REPORTING

Chapter: 5300

Section: 5330.2

Policy: Each state entity shall comply with the following reporting requirements: Designation Letter (SIMM 5330-A) – Annual submissions are due to the Office of Information Security (OIS) on the last business day of the state entity’s scheduled reporting month, as outlined in the Infor ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5330-2
SYSTEM AND SERVICES ACQUISITION

Chapter: 5300

Section: 5315.1

Policy: Each state entity shall determine the information security requirements (confidentiality, integrity, and availability) for its information assets in mission/business process planning; determine, document and allocate the resources required to protect the information assets as part of its cap ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5315-1
SECURITY AND PRIVACY AWARENESS

Chapter: 5300

Section: 5320.1

Policy: Each state entity shall provide basic security and privacy awareness training to all information asset users (all personnel, including managers and senior executives) as part of initial training for new users and annually thereafter. Each state entity shall determine the appropriate content ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5320-1
INCIDENT RESPONSE TESTING

Chapter: 5300

Section: 5340.2

Introduction: Incident response testing includes an assessment of the effects on state entity operations (e.g., reduction in mission capabilities), state entity assets, and individuals due to incident response, and involves the use of checklists, walk-through or tabletop exercises, and simulations t ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5340-2
PRIVACY THRESHOLD AND PRIVACY IMPACT ASSESSMENTS

Chapter: 5300

Section: 5310.8

Policy: Information asset owners shall apply all applicable statewide and state entity information privacy and security laws, policies, standards, and procedures in order to protect personal information under the information asset owner’s responsibility. This includes, but is not limited to co ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5310-8
INTRODUCTION

Chapter: 5300

Section: 5300

Information security refers to the protection of information, information systems, equipment, software, and people from a wide spectrum of threats and risks. Implementing appropriate security measures and controls to provide for the confidentiality, integrity, and availability of information, regard ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5300
OPERATIONAL SECURITY

Chapter: 5300

Section: 5350

Introduction: In order to mitigate against successful attacks, each state entity is responsible for separating and controlling access to various systems and networks with different threat levels and sets of users which may operate or interface within their technology environment. Policy: Each state ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5350
CONFIGURATION MANAGEMENT

Chapter: 5300

Section: 5315.5

Policy: Each state entity shall establish a documented process regarding controlled modifications to hardware, firmware, and software to protect the information asset against improper modification before, during, and after system implementation. Implementation Controls: NIST SP 800-53: Configu ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5315-5
TECHNOLOGY RECOVERY TRAINING

Chapter: 5300

Section: 5325.2

Policy: Each state entity shall establish technology recovery training and exercises for personnel involved in technology recovery, to ensure availability of skilled staff. The training exercises shall include a crisis communication plan, event status reporting requirements, and focused role-based t ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5325-2
PRIVACY

Chapter: 5300

Section: 5310

Introduction: Privacy can be understood as the rights of individuals, as defined by law, to control the collection and use of their personal information. This privacy policy is based generally on the Information Practices Act of 1977 (Civil Code section 1798, et seq.). In addition to its general app ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5310
SECURITY AUTHORIZATION

Chapter: 5300

Section: 5315.9

Introduction: The authorizing official(s) provide budgetary oversight for state entity information assets and assume responsibility for the mission/business operations supported by those systems. Policy: Consistent with the State Information Management Principles, Record of Decisions (SAM section 48 ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5315-9
INFORMATION SECURITY INTEGRATION

Chapter: 5300

Section: 5315

Policy: Each state entity is responsible for the integration of information security and privacy within the organization. This includes, but is not limited to, the designing of appropriate security controls in new systems, or systems that are undergoing substantial redesign, including both in-house ...

https://www.dgs.ca.gov/Resources/SAM/TOC/5300/5315
COMPENSATION AND DISABILITY INSURANCE - UNEMPLOYMENT INSURANCE

Chapter: 8500

Section: 8535

Unemployment Insurance (UI) is an employer-paid program that provides partial income replacement when an employee becomes unemployed or has their hours reduced and meet all eligibility requirements as defined by the Employment Development Department (EDD). In accordance with the Unemployment ...

https://www.dgs.ca.gov/Resources/SAM/TOC/8500/8535
PAYROLL ACCOUNTING - OVERVIEW

Chapter: 8500

Section: 8590

The State Controller’s Office (SCO), Uniform State Payroll System, will process each state agency’s/department’s payroll transactions entered by their human resources office and generate the following: Payment History File - available to the agency/department monthly Payr ...

https://www.dgs.ca.gov/Resources/SAM/TOC/8500/8590
PERSONNEL PROCEDURES - POSITION NUMBERS

Chapter: 8500

Section: 8533

Positions numbers are a 13-digit number to identify established positions. The position number consists of agency code, reporting unit code, class code, and serial number. Agency Code Three-digit code identifying the agency or major subdivision for personnel/payroll use, and the fund from which sa ...

https://www.dgs.ca.gov/Resources/SAM/TOC/8500/8533
PAYROLL ACCOUNTING OVERVIEW - PAYROLL ACCOUNTS RECEIVABLE

Chapter: 8500

Section: 8593

Whenever an employee is overpaid, the State Controller's Office (SCO) processes an adjustment notice to notify the employee of the amount overpaid. The SCO will send a Notice of Payroll Accounts Receivable (PAR) to the agency/department. The PAR contains the following information: ...

https://www.dgs.ca.gov/Resources/SAM/TOC/8500/8593
SUMMARY OF CONTROLLER'S PAYROLL FUNCTIONS

Chapter: 8500

Section: 8520

Per Government Code sections 12470-12481 and 16390-16395 and California Code of Regulations, Title 2, sections 633.7 and 633.8, the State Controller’s Office (SCO) is responsible in the administering of the Uniform State Payroll System. &nb ...

https://www.dgs.ca.gov/Resources/SAM/TOC/8500/8520
TAX WITHHOLDING AND REPORTING - UNIFORM ALLOWANCES

Chapter: 8500

Section: 8572.5

In accordance with the California Code of Regulations, Title 2, sections 599.726-599.734, the state may make an allowance for uniforms replacement. In addition to the income reporting requirements, some uniform allowances are subject to withholding for retirement contributions. If applicable, ...

https://www.dgs.ca.gov/Resources/SAM/TOC/8500/8572-5
SALARY WARRANTS - DISTRIBUTION

Chapter: 8500

Section: 8580

The State Controller’s Office (SCO) will release salary warrants, Payroll Warrant Register forms, CD 38, and Payroll Exceptions Report forms, STD 666, to designated individuals. The SCO will require the individual to sign an acknowledging receipt. To designate an individual, a ...

https://www.dgs.ca.gov/Resources/SAM/TOC/8500/8580