Law / United States / 
Arizona
Security incident reporting by state budget units and their contractors to the statewide information security and privacy office
In force.
A vulnerability and incident reporting rule binding public and private bodies.
- Obligation class
- Reporting
As of .
What it requires
- This duty binds each budget unit of the state and its contractors; a private business with no state contract is not bound.
- Identify and report each security incident to the statewide information security and privacy office in the Arizona department of homeland security immediately on discovery, and deploy mitigation strategies as directed.
- Comply with the office's directive to temporarily discontinue or suspend operations of information infrastructure that is owned, leased, outsourced or shared, where the office issues one to isolate the source of, or stop the spread of, a security breach or similar incident.
These lines are LexLint's reading of the law's text, as of .
What this law does
Each budget unit and its contractors must identify and report security incidents to the statewide information security and privacy office immediately on discovery and deploy mitigation strategies as directed. The statewide information security and privacy office is established in the Arizona department of homeland security.
The office may temporarily suspend operation of information infrastructure to isolate the source of, or stop the spread of, an information security system breach or other similar incident. A budget unit and the department of administration, as applicable, must comply with directives to temporarily discontinue or suspend operations of information infrastructure.
The statewide office is to establish a state security operations center for central detection, reporting and response efforts for security incidents and breaches across the state. In chapter 1 of title 18, a budget unit means a department, commission, board, institution or other agency of the state receiving, expending or disbursing state funds or incurring obligations of the state.