Law / United States / 
Montana
Executive branch department heads, security of department data
In force.
A sector security regimes rule binding government bodies.
- Obligation class
- Security
As of .
What it requires
- This duty binds each department head, under Title 2, chapter 15 of the Montana Code, which governs executive branch officers and agencies. It does not bind a private business.
- Develop and maintain written internal policies and procedures to ensure security of data; they are confidential and exempt from public inspection except for the legislative auditor.
- Designate an information security manager to administer the department's security program for data, and implement appropriate cost-effective safeguards to reduce, eliminate, or recover from identified threats to data.
- Ensure that internal evaluations of the security program for data are conducted, include appropriate security requirements in the written specifications for the department's solicitation of data and information technology resources, and describe the existing security program and future plans in the agency information technology plan.
These lines are LexLint's reading of the law's text, as of .
What this law does
Each department head is responsible for ensuring an adequate level of security for all data within that department. A department head must develop and maintain written internal policies and procedures to ensure security of data. A department head must designate an information security manager to administer the department's security program for data. A department head must implement appropriate cost-effective safeguards to reduce, eliminate, or recover from identified threats to data. A department head must ensure that internal evaluations of the security program for data are conducted.