Law / United States / 
Montana
State agencies, immediate notice of a security incident to the chief information security officer
In force.
A vulnerability and incident reporting rule binding government bodies.
- Obligation class
- Reporting
As of .
What it requires
- This duty binds a state agency: an agency, authority, board, bureau, college, commission, committee, council, department, hospital, institution, office, university, or other instrumentality of the legislative or executive branch of state government, including an employee acting within the course and scope of employment, but not an entity of the judicial branch. It does not bind a private business.
- On discovery or notification of a security incident, provide immediate notification without unreasonable delay to the chief information security officer at the department of administration.
These lines are LexLint's reading of the law's text, as of .
What this law does
On discovery or notification of a security incident, a state agency must provide immediate notification without unreasonable delay to the chief information security officer.
A security incident is an occurrence that actually or potentially jeopardizes the confidentiality, integrity, or availability of an information system or the information the system processes, stores, or transmits, or that constitutes a violation or imminent threat of violation of security policies, security procedures, or acceptable use policies. The chief information security officer is an employee at the department of administration designated by the chief information officer.
A state agency is an agency, authority, board, bureau, college, commission, committee, council, department, hospital, institution, office, university, or other instrumentality of the legislative or executive branch of state government, and the term does not include an entity of the judicial branch.