VIRGINIA LAW PORTAL

• Code of Virginia
• Virginia Administrative Code
• Constitution of Virginia
• Charters
• Authorities
• Compacts
• Uncodified Acts
• RIS Users (account required)

SEARCHABLE DATABASES

• Bills & Resolutions
  session legislation
• Bill Summaries
  session summaries
• Reports to the General Assembly
  House and Senate documents
• Legislative Liaisons
  State agency contacts

ACROSS SESSIONS

• Subject Index: Since 1995
• Bills & Resolutions: Since 1994
• Summaries: Since 1994

Developed and maintained by the Division of Legislative Automated Systems.

2002 SESSION

• history | hilite | pdf | print version

CHAPTER 247 An Act to amend the Code of Virginia by adding a section numbered 2.2-226.1, and to repeal Article 4 (§§ 2.2-136 to 2.2-138) of Chapter 1 of Title 2.2 of the Code of Virginia, relating to the security of government databases. [H 823] Approved March 22, 2002

Be it enacted by the General Assembly of Virginia:

1. That the Code of Virginia is amended by adding a section numbered 2.2-226.1 as follows:

§ 2.2-226.1. Security of government databases.

A. To ensure the security of state government databases and data communications from unauthorized uses, intrusions or other security threats, the Secretary of Technology shall direct the development of policies, procedures and standards for assessing security risks, determining the appropriate security measures and performing security audits of government databases and data communications. At a minimum, these policies, procedures and standards shall address the scope of security audits and which public bodies are authorized to conduct security audits. In developing and updating such policies, procedures and standards, the Secretary shall consider, at a minimum, the advice and recommendations of the Council on Technology Services created pursuant to § 2.2-2651.

B. The Secretary shall designate a government entity to oversee, plan and coordinate the conduct of periodic security audits of all executive branch agencies and institutions of higher education regarding the protection of government databases and data communications.

1. Security audits may include, but are not limited to, on-site audits as well as reviews of all written security procedures.

2. The designated entity may contract with a private firm or firms that specialize in conducting such audits subject to approval of the Secretary.

C. All public bodies subject to such audits as required by this section shall fully cooperate with the entity designated to perform such audits.

D. The provisions of this section shall not infringe upon responsibilities assigned to the Comptroller, the Auditor of Public Accounts, or the Joint Legislative Audit and Review Commission by other provisions of the Code of Virginia.

2. That Article 4 (§§ 2.2-136 to 2.2-138) of Chapter 1 of Title 2.2 of the Code of Virginia is repealed.