36 Miss. Code. R. 1-12.2

Current through August 31, 2024
Rule 36-1-12.2

Agencies with larger computer installations must:

A. Protect access with an access control system, normally a card access system.
B. Establish procedures for granting, modifying, and revoking access.
C. Establish procedures for recording information (date, time, etc.) to track access.
D. Require security related clearance as a result of employment. (For example, all ITS employees that have access to State Data Center facilities are sworn in as Information Confidentiality Officers as defined by legislation and are subject to background checks).
E. Use cameras to record activity in and around computer installation.
F. Establish a policy for archiving access system and video data. Agencies must archive access system and video data for a minimum period of 30 days.
G. Restrict visitors in the computer facilities. Visitors that are allowed access must sign a sign-in/out log and must be accompanied by an authorized staff member.

36 Miss. Code. R. 1-12.2

Miss. Code Ann. § 25-53-1 to § 25-53-25.