Related Websites

• California Technology Agency
• CA Highway Patrol
• CA Emergency Management Agency
• CA Office of Health Information Integrity
• CA Office of Privacy Protection

Right Column

Schedule of Required Security Reporting Activities

The following provides a summary schedule of required security reporting activities with corresponding due dates. Unless otherwise noted, all reports are submitted in hard copy with original signature(s) to the Office of Information Security.

Report/Activity	Policy Section	Instructions and Forms	Due Date
Agency Designation Letter	5360.1	SIMM 70A	Annually by January 31 and within ten (10) business days of any change in designee
Agency Risk Management and Privacy Program Compliance Certification	5360.1	SIMM 70C	Annually by January 31
Disaster Recovery Plan (Complete)	5360.1	SIMM 65A SIMM 70D	Annually pursuant to the DRP Submission Schedule
Disaster Recovery Plan Certification (No-Change)	5360.1	SIMM 70B	Every-other year pursuant to the DRP Submission Schedule in lieu of a complete plan when no changes have occurred since last submission.
Agency Information Security Incident Report	5360.1	SIMM 65B SIMM 65C SIMM 65D	Within ten (10) business days from the date of notification to CHP's Emergency Notification and Tactical Alert Center (ENTAC)
Agency Telework and Remote Access Security Compliance Certification	5340	SIMM 70E	Initial by July 1, 2010.  Annually by January 31 thereafter, commencing January 31, 2011.