Law / United States / 
Guam
Office of Technology, Chief Technology Officer duties relating to security of government information and annual security audits of executive branch agencies
In force.
A sector security regimes rule binding government bodies.
- Obligation class
- Security, Governance
As of .
What it requires
- This Article binds the Chief Technology Officer and the agencies of the executive branch of the government of Guam, other than autonomous agencies, and does not apply to the legislative and judicial branches; it does not bind a private business.
- As a public body subject to the annual security audit of government databases and data communications, cooperate fully with the entity designated to perform the audit.
- As an executive branch agency, assist the Chief Technology Officer in planning for your specific needs under the government information systems disaster recovery system, and provide the Chief Technology Officer any information or access to information systems or equipment that may be required for that purpose.
- Do not initiate, let or extend any government-wide or executive branch agency procurement of disaster recovery services without the express consent of the Chief Technology Officer.
These lines are LexLint's reading of the law's text, as of .
What this law does
The Office of Technology Article applies to all agencies of the executive branch of the government of Guam, not including the autonomous agencies, and does not apply to the legislative and judicial branches. The Chief Technology Officer must ensure the security of government information and the data communications infrastructure from unauthorized uses, intrusions or other security threats.
The Chief Technology Officer must, at least annually, perform security audits of all executive branch agencies regarding the protection of government databases and data communications. All public bodies subject to the audits must fully cooperate with the entity designated to perform the audit. The Chief Technology Officer may direct specific remediation actions to mitigate findings of insufficient administrative, technical and physical controls.
Each executive branch agency must assist the Chief Technology Officer in planning for its specific needs and provide any information or access that is required for that purpose.