Law / United States / 
Delaware
Department of Technology and Information, State Information Security Program
Del. Code Ann. tit. 29, § 9011C
In force since .
A sector security regimes rule binding public and private bodies.
- Obligation class
- Security
As of .
What it requires
- This section gives the Department of Technology and Information the power to develop and implement the State Information Security Program for the State's data, systems, and infrastructure; the power is not itself a duty on anyone, and the duties below are the ones the section states in its own words.
- Comply with the State Information Security Program for every system you connect to the State network.
- Give the Department of Technology and Information your full cooperation in identifying compliance requirements or industry standards if you are a state agency.
These lines are LexLint's reading of the law's text, as of .
What this law does
The Department of Technology and Information has the power to develop and implement a comprehensive information security program that applies personnel, process, and technology controls to protect the State's data, systems, and infrastructure, within the State's computing environment and on partner systems. All systems that connect to the State network must comply with the State Information Security Program.
The Department has the power to establish a central Security Operations Center to direct statewide cyber defense and cyber threat mitigation. The Department must have the full cooperation of state agencies in identifying compliance requirements or industry standards.
The Department may temporarily disrupt the exposure of an information system or information technology infrastructure that one or more state agencies own, lease, outsource, or share, in order to isolate the source of, or stop the spread of, an information security breach or other similar information security incident. Chapter 185 of volume 82 of the Laws of Delaware, approved , added section 9011C.