Report 2021-602 Recommendation Responses

Report 2021-602: State High-Risk Update—Information Security: The California Department of Technology's Inadequate Oversight Limits the States Ability to Ensure Information Security (Release Date: January 2022)

Recommendation for Legislative Action

To strengthen the information security practices of nonreporting entities, the Legislature should amend state law to require nonreporting entities that allow employees to telework to develop telework policies and training comparable to those CDT requires.

Description of Legislative Action

As of February 6, 2023, the Legislature has not taken action to address this specific recommendation.

California State Auditor's Assessment of Status: No Action Taken


Description of Legislative Action

As of October 26, 2022, the Legislature has not taken action to address this specific recommendation.

California State Auditor's Assessment of Status: No Action Taken


Description of Legislative Action

As of March 18, 2022, the Legislature has not taken action to address this specific recommendation.

California State Auditor's Assessment of Status: No Action Taken


All Recommendations in 2021-602