Can I collect server log information from participants in Mississippi? What are the requirements?

Collecting Server Log Information from Participants in Mississippi

Based on the provided context documents, it is possible to collect server log information from participants in Mississippi. However, it is important to consider the proper physical location of the server and information security incidents when collecting and storing any type of data.

According to 36 MSAC Part 1 Chapter 5 Rule 5.2, the proper physical location of the server must be considered. Additionally, 36 MSAC Part 1 Chapter 3 Rule 3.1 requires each agency to report all information security incidents to the ITS Information Security Division (ISD) as soon as possible. Information security incidents result from a validation of an information security event. Information security events are defined as any violation of computer security policies, network integrity, data confidentiality, or standard computer security practices.

Furthermore, Rule 5.3 of 36 MSAC Part 1 Chapter 5 states that internet-facing servers that reside on the State Network must be properly secured to preserve the integrity of the network. Inbound connections from the Internet or any third party network will be made using HTTP or HTTPS through enterprise reverse proxy devices in the ITS DMZ.

It is recommended that you consult with an attorney or IT security professional to ensure that you are complying with all relevant laws and regulations when collecting and storing server log information from participants in Mississippi.

In summary, it is possible to collect server log information from participants in Mississippi. However, it is important to consider the proper physical location of the server, information security incidents, and the proper security measures when collecting and storing any type of data.

^{[2.1][3.2][4.1][3.3][1.2]}

Source(s):

• [2.1] Third Party Information
• [3.2] Public Information via the Internet.
• [4.1] Release of Patient/Resident Information.
• [3.3] Public body description–Contact information–Public records officer
• [1.2] Internet-facing servers that reside on the State Network must be properly secured to preserve the integrity of the network.

Jurisdiction

Mississippi

• Privacy