Current through Register Vol. 47, No. 8, October 30, 2024
Rule 721-29.2 - Cybersecurity training(1) All users who access the I-Voters database must complete annual training programs on principles of cybersecurity. Upon completion of the training, a user shall transmit proof of completion to the state registrar. The state registrar shall maintain a list of approved training programs on the secretary of state's website. The state registrar shall consult with the OCIO or the federal Election Assistance Commission before adding trainings to the list of approved programs. If requested by the office of the chief information officer, the federal Election Assistance Commission, or a county registrar, the state registrar may review and add recommended cybersecurity training programs to the approved list.(2) The state registrar may disable any user account if the user does not complete the training within 30 days of access granted, or on the anniversary date set by the state registrar.(3) The state registrar may temporarily waive this requirement for any user if the state registrar believes it is necessary to the execution of the election.Iowa Admin. Code r. 721-29.2
Adopted by IAB October 24, 2018/Volume XLI, Number 9, effective 11/28/2018