(a) If an agency fails to comply with statewide cybersecurity requirements under Section 25-53-201 or procedures executed by the SSOC under Sections 25-53-351 through 25-53-365, the Executive Director of ITS may:(a) Impose additional oversight, monitoring or cybersecurity audit requirements;(b) Temporarily limit access to ITS-managed systems or services until compliance is restored; or(c) Assess additional fees for increased monitoring, remediation or risk exposure.
(a) Impose additional oversight, monitoring or cybersecurity audit requirements;
(b) Temporarily limit access to ITS-managed systems or services until compliance is restored; or
(c) Assess additional fees for increased monitoring, remediation or risk exposure.