Chapter 480 - Security of Information Systems
- Section 480.100 - Definitions
- Section 480.110 - "Certification" defined
- Section 480.115 - "Cybersecurity incident response plan" defined
- Section 480.120 - "Data breach" defined
- Section 480.125 - "Detect" defined
- Section 480.130 - "Distributed denial of service" defined
- Section 480.135 - "Incident" defined
- Section 480.140 - "Incident response" defined
- Section 480.145 - "Information system" defined
- Section 480.150 - "Office" defined
- Section 480.155 - "Political subdivision" defined
- Section 480.160 - "Protected information" defined
- Section 480.165 - "Ransomware" defined.
- Section 480.170 - "Sensitive information" defined.
- Section 480.175 - "Threat" and "cybersecurity threat" defined
- Section 480.200 - Cybersecurity incident response plan: Contents and requirements
- Section 480.205 - Cybersecurity incident response plan: Political subdivision authorized to include certain internal groups into plan
- Section 480.210 - Cybersecurity incident response plan: Effective upon certification.
- Section 480.215 - Cybersecurity incident response plan: Administrative or nonsubstantive change does not require filing of revised plan
- Section 480.230 - Political subdivision required to document actions taken to mitigate or recover from incident
- Section 480.235 - Political subdivision required to report significant information learned from incident; use of information
- Section 480.240 - Political subdivision required to report certain types of cybersecurity incidents; contents of report