Ask Reggi Your Question Now
Can I skip having an information security program in place in West Virginia? What are the requirements?
Information Security Program Requirements in West Virginia
Based on the documents provided, it is mandatory for state agencies and licensees to have an information security program in place in West Virginia [1.1][3.1][3.2].
The West Virginia Cybersecurity Office oversees the implementation of information security programs for all state agencies, excluding higher education institutions, the State Police, state constitutional officers identified in §6-7-2 of this code, the Legislature, and the Judiciary [1.1].
Each licensee is required to implement a comprehensive written information security program that includes administrative, technical, and physical safeguards for the protection of customer information [3.1]. The information security program should be designed to ensure the security and confidentiality of customer information, protect against any anticipated threats or hazards to the security or integrity of the information, and protect against unauthorized access to or use of the information that could result in substantial harm or inconvenience to any customer [3.2].
Therefore, it is not possible to skip having an information security program in place in West Virginia.
Source(s):
- [1.1] West Virginia Cybersecurity Office; scope; exemptions.
- [3.1] Information Security Program.
- [3.2] Objectives of Information Security Program.
Jurisdiction
West Virginia