Law / United States / 
Iowa
State supported entities, security incident reports to the Department of Management
In force.
A vulnerability and incident reporting rule binding government bodies.
- Obligation class
- Reporting
As of .
What it requires
- This power reaches a supported entity: a unit of state government that is an authority, board, commission, committee, council, department or independent agency as defined in section 7E.4, other than the office of the governor or of an elective constitutional or statutory officer, the general assembly, the judicial branch, a political subdivision of the state, and the state board of regents and its institutions. It does not bind a private business.
- When the chief information officer requires it, report information technology security incidents to the department in a timely manner, provide comprehensive information concerning the information technology security the entity employs, and forecast the entity's projected future information technology security needs and capabilities.
These lines are LexLint's reading of the law's text, as of .
What this law does
Among the powers and duties of the chief information officer is requiring supported entities to report information technology security incidents to the department in a timely manner, to provide comprehensive information concerning the information technology security they employ and to forecast their projected future information technology security needs and capabilities.
A supported entity is a unit of state government that is an authority, board, commission, committee, council, department or independent agency as defined in section 7E.4, including each principal central department enumerated in section 7E.5.
A supported entity does not include the office of the governor or the office of an elective constitutional or statutory officer, the general assembly, the judicial branch, a political subdivision of the state or the state board of regents and the institutions it operates.