"National Electronic Interstate Compact Enterprise system" or "NEICE system" means the national electronic web-based system for administration of the interstate compact on the placement of children made available to states by the American Public Human Services Association through its affiliate, the Association of Administrators of the Interstate Compact on the Placement of Children.
"Security requirements" means all policies or system security guidance established by the department and the office of the chief information officer related to the use of external computer systems for the storage of personally identifiable data elements of applicants for and recipients of department services. Security requirements as defined herein include but are not necessarily limited to completion by the vendor of the then current cybersecurity framework made available by the National Institute of Standards and Technology, department confirmation that the system has passed the cybersecurity framework analysis, completion by the vendor of an information security risk assessment acceptable to the department, performance by the vendor of a system penetration test acceptable to the department, and an application scan for vulnerabilities, as well as remediation of any vulnerabilities identified.
Iowa Admin. Code r. 441-142.10