New Mexico Administrative Code

A. The CIO will maintain a listing of all IP addresses and access protocols by agency. B. The listing will be protected as confidential information.

The Security and Privacy Advisory Committee will recommend to the Commission for their approval access protocols, in addition to those defined in 1.12.8.7 NMAC, subject to this rule.

Except in response to an active threat, within five (5) working days of approval by the Commission of additional access protocols subject to this rule, the Office shall: A. post a notice of approved access protocols subject to this rule on the Internet at its internet address; B.…

There are no exemptions from this rule.

This rule applies to all state agencies, boards, and commissions to whom the General Services Department provides Internet access.

NMSA 1978 Section 15-1C-5.

Permanent.

March 15, 2002 unless a later date is cited at the end of a section.

The purpose of this rule is to provide the underlying data necessary to provide Internet security for state agencies, boards and commissions.

As used in this rule: A. access protocols means the standard set of protocols and ports for all types of access as defined by the Internet Architecture Board of the Internet Society International Board; including, but not limited to: http, https, remote terminal (telnet), simple …

A. Agencies shall submit to the Director of ISD-OC and the CIO a written listing (preferably in an Excel spreadsheet) of all agency IP addresses and the access protocols of all network devices that allow access to the public Internet. B. Agencies shall inform the Director of ISD-…

ISD-OC will deny access from and to the public Internet for access protocols not specifically reported to ISD-OC and the CIO.

Information Technology Commission.

A. PCC certification generally. At a minimum, project certification shall be required at a project's initiation, during its implementation and closeout. The PCC may require additional certification phases, events or deliverables based on the progress, complexity, risk or size of …

A. An executive agency shall: (1) prepare a written project certification report prior to certification for large projects that are equal to or exceeding $1,00,000, high-risk projects or at the request of the PCC; (2) schedule a certification review and provide documentation in a…

A. Plan Required. An agency shall prepare, in accordance with instructions contained in the project management guidelines and best practices document prepared by eth office, a project plan for every IT project regardless of its scope or cost. The agency project manager shall docu…

This rule applies to certification of all information technology projects or programs undertaken by executive agencies.

Sections 15-1C-5 and 15-1C-8 NMSA, 1978.

Permanent.

October 17, 2005, unless a later date is cited at the end of a section.

The purpose of this rule is to set forth executive agency information technology project certification responsibilities.

A. "Agency" means a state organizational entity of the executive branch, used interchangeably with department. B. "Certification" means a process that releases project funds. The ITC certifies projects except as otherwise provided for in Section 1.12.9.10(c). The PCC is the subco…

The PCC is a subcommittee of the ITC and shall perform the following responsibilities. A. Have the authority to recommend certification of information technology projects that meet one or more of the following:(1) mission criticality; (2) project cost equal to or exceeding $1,000…

A. The PCC shall consist of members of the ITC appointed by the ITC chair. B. The ITC chair shall appoint the chair of the PCC. C. The PCC will select a vice chair from its membership.

State Records Administrator.

A. Access to records stored in the records center shall be authorized in writing by the records custodian, chief records officer or records liaison officer. B. Public access to records stored at the records center is prohibited. All requests for inspection of records shall be dir…

A. The records management division provides storage to agencies for inactive public records. Non-record materials shall not be submitted for storage in the records center. B. Records involved in pending litigation, an audit or investigation are not eligible for transfer to the re…

A. Records with a retention of permanent shall include a records index on a form approved by the administrator. B. A copy of the records index form shall be placed in the storage box. An electronic copy of the records index form shall be submitted with the corresponding storage t…

A. For storage requirements, refer to 1.13.10.11 and 1.13.10.12 NMAC. B. All state agencies and any public entity shall have an approved microphotography plan on file with the records management division before master microfilm can be stored. For microfilm plan requirements, refe…

A. An agency shall have an approved imaging plan on file with the administrator before electronic media can be stored at the state records center. For information on imaging plans see 1.14.2 NMAC, Microphotography Systems, Microphotography Standards. B. An agency shall complete a…

A. An agency shall have an approved microphotography plan on file with the records management division before master microfilm can be stored. For information on microphotography systems and standards see 1.14.2 NMAC. B. The microphotography plan shall specify that the master micr…

A. The records management division is responsible for reviewing and applying the appropriate retention to records brought in for storage. The records management division shall notify records custodians and chief records officer when the custodial agency's records are eligible for…

A. An agency may transfer records with a retention period of permanent or transfer to state archives to the state archives directly by submitting a request for disposition form and the required index to the records management division for review and approval. The request for disp…

A. A records liaison officer may be designated by a records custodian to handle the storage, withdrawal and access or transfer of agency records to the state records center. B. All records liaison officers shall attend the required basic records management training offered by the…

All state agencies and any public entity that use the state records center services.

A. One chief records officer shall be designated by the agency records custodian. B. The chief records officer shall the authority to oversee the agency's records management program. C. The chief records officer shall have the same authorities and responsibilities as a record lia…

Public Records Act, Section 14-3-6 NMSA 1978.

Permanent.

November 30, 2015, unless a later date is cited at the end of a section.

To establish requirements for the custody, access, storage and disposition of records stored at the state records center by agencies that utilize the records center services.

A. "Chief records officer" means a person designated by an agency's records custodian to administrate the agency's records management program, refer to 1.13.12.9 NMAC. B. "Custodial agency" means the agency responsible for the creation, maintenance, safekeeping and preservation o…

In accordance with the functional records retention and disposition schedule, agency records stored at the records center shall remain in the custody of the records custodian of the custodial agency until: A. they are destroyed or transferred to archives with written approval fro…

A. Agencies utilizing the records center shall use storage boxes 15" x 12" x 10" in size. Records with a retention of permanent must be submitted in acid-free boxes. Agencies submitting boxes for storage containing paper records shall: (1) place only one type of record classifica…

Commission of Public Records - New Mexico State Records Center and Archives

A. Documents may be photocopied or duplicated for a fee. (1.13.2 NMAC) B. Certain documents may not be copied due to physical condition, possible damage, or legal restrictions. (1) Archivists shall determine the suitability of documents to be photocopied. (2) Original documents w…

A. Under the Inspection of Public Records Act, Section 14-2-1 NMSA 1978, access to certain records is restricted. For certain law enforcement records, see 1.13.11.17 NMAC for inspection or duplication. B. The use of donated materials shall be subject to restrictions placed by the…