Section 999.220 - Incident Reporting(a) A reportable incident that compromises the security of an ERDS shall be reported to the ERDS Program by either U.S. Mail or electronic mail.(b) The County Recorder shall establish criteria, policies, and procedures for handling and responding to incidents.(c) In the case of a Multi-County ERDS, any Sub-County shall report incidents to the Lead County Recorder within two (2) business days.(d) After notifying the ERDS Program of a reportable incident, the County Recorder, either in their official capacity or by delegation of the responsibility, shall prepare a detailed incident report that shall include all of the following: the date of the incident; the parties involved (if known); the nature and scope of the incident; and action(s) taken, including steps to protect against future incidents.(e) The detailed incident report shall be forwarded to the ERDS Program, the Computer Security Auditor, District Attorney of all affected counties, and the Board of Supervisors of all affected counties within ten (10) business days of the incident date. The County Recorder shall maintain the report for a period of two (2) years, and the report shall be subject to review during audits and local inspections.(f) Upon receipt of a detailed incident report the ERDS Program shall do all of the following: (1) Send written notification within two (2) business days to the reporting party acknowledging receipt of the detailed report.(2) Send a notification of the ERDS investigative result and the appropriate action to be taken, if any, to the County Recorder, Computer Security Auditor, Board of Supervisors of all affected counties, and District Attorney of all affected counties.(3) Maintain a copy of the report for statistical purposes.Cal. Code Regs. Tit. 11, § 999.220
1. New section filed 7-31-2007; operative 8-30-2007 (Register 2007, No. 31).
2. Amendment of subsection (d) filed 8-11-2014; operative 10-1-2014 (Register 2014, No. 33).
3. Amendment filed 10-7-2019; operative 1-1-2020 (Register 2019, No. 41).
4. Change without regulatory effect amending subsection (d) filed 12-6-2021 pursuant to section 100, title 1, California Code of Regulations (Register 2021, No. 50). Note: Authority cited: Sections 27393, 27396(a) and 27396(b), Government Code. Reference: Sections 27393(b)(2), 27393(c), 27394(f), 27396(a) and 27396(b), Government Code.
1. New section filed 7-31-2007; operative 8-30-2007 (Register 2007, No. 31).
2. Amendment of subsection (d) filed 8-11-2014; operative 10/1/2014 (Register 2014, No. 33).
3. Amendment filed 10-7-2019; operative 1/1/2020 (Register 2019, No. 41).
4. Change without regulatory effect amending subsection (d) filed 12-6-2021 pursuant to section 100, title 1, California Code of Regulations (Register 2021, No. 50).