Law / United States / 
Hawaii
Security audits of executive branch information systems
Security Audits of Government Information, Haw. Rev. Stat. Sec. 27-43.5
In force since .
A sector security regimes rule binding government bodies.
- Instrument type
- an act of a legislature
- Obligation class
- Security, Governance
As of .
What it requires
- This binds the executive branch departments, agencies, boards and commissions of the State, and the chief information officer who audits them; it applies to government bodies only (HRS 27-43.5(a) and (b)).
- Submit to the periodic security audits the chief information officer provides for, which may include on-site audits and reviews of all written security procedures and documented practices (HRS 27-43.5(a) and (b)).
- Fully cooperate with the entity designated to perform the audit (HRS 27-43.5(b)).
- The chief information officer may direct specific remedial actions to mitigate findings of insufficient administrative, technical and physical controls necessary to protect state government information or data communication infrastructure (HRS 27-43.5(b)).
These lines are LexLint's reading of the law's text, as of .
What this law does
The chief information officer must provide for periodic security audits of all executive branch departments and agencies regarding the protection of government information and data communication infrastructure. Executive branch departments, agencies, boards, or commissions subject to the security audits must fully cooperate with the entity designated to perform the audit.
The chief information officer may direct specific remedial actions to mitigate findings of insufficient administrative, technical, and physical controls necessary to protect state government information or data communication infrastructure. Act 265 of 2013, which added the security audit section, took effect upon its approval on .