Can I skip having an information security program in place in Nevada? What are the requirements?

Based on the documents provided, it is not possible to skip having an information security program in place in Nevada. In fact, the state has several requirements related to the security of information systems.

Requirements for Information Security Programs in Nevada

• The Nevada Information Systems Policies and Standards Manual is adopted by reference ^[1.1].
• The Administrator is responsible for developing policies and standards for the information systems of the Executive Branch of Government ^[2.1].
• The definition of “security of an information system” includes the security of personal information stored on an information system ^[3.1].
• The Administrator is required to adopt regulations necessary for the administration of information systems in the Executive Branch of Government, including the development of standards to ensure the security of information systems ^[2.2].
• The Chief of the Office of Information Security is responsible for investigating and resolving any breach of an information system of a state agency or elected officer that uses the equipment or services of the Division or an application of such an information system or unauthorized acquisition of computerized data that materially compromises the security, confidentiality or integrity of such an information system ^[2.3].
• The Legislature has declared that the protection and security of information systems are essential to protecting the health, safety, and welfare of the people of Nevada, and has mandated the preparation and updating of a statewide strategic plan for information system security ^[3.2][3.3].

Therefore, it is clear that having an information security program in place is required in Nevada. The state has several regulations and policies in place to ensure the security of information systems.

Source(s):

• [1.1] Adoption by reference of Nevada Information Systems Policies and Standards Manual.
• [2.1] Development of policies, standards, guidelines and biennial state plan for information systems of Executive Branch of Government.
• [3.1] “Security of an information system” defined.
• [2.2] Regulations.
• [2.3] Investigation, resolution and notification of certain breaches or applications of information systems or certain unauthorized acquisitions of computerized data.
• [3.2] Legislative findings and declarations regarding security of information systems.
• [3.3] Office to prepare and update statewide strategic plan regarding security of information systems; use of information by private entity; state agencies with cybersecurity policy required to test adherence to policy by employees and submit results to Office.

Jurisdiction

Nevada

• Privacy