Library: Policy
OKDHS:2-45-1. Information Security Office purpose and authority
Revised 5-1-09
(a) Purpose. The Information Security Office (ISO) is charged with managing, overseeing, and auditing Oklahoma Department of Human Services (OKDHS) divisions and business units to:
- (1) evaluate, mitigate, and reduce risks to OKDHS data and information systems, in coordination with the OKDHS risk manager, as appropriate. Assessments are conducted in conjunction with the OKDHS risk manager;
- (2) identify, assess, and appropriately manage information security risks to OKDHS business processes, assets, and information systems;
- (3) assist OKDHS divisions and business units to determine and implement controls that appropriately and proactively respond to information security risks;
- (4) develop, implement, and monitor divisional emergency operating plans agencywide; and
- (5) coordinate with OKDHS divisions and business units to manage, respond to, and mitigate identified information security risks.
(b) Authority. Authority is granted to ISO by OKDHS executive management and officers to fulfill the requirements of Section 41.5a of Title 62 and Section 683.2(C) of Title 63 of the Oklahoma Statutes.
