New Hampshire § 21-R:4-a Duties of the Chief Information Security Officer

New Hampshire Statutes

§ 21-R:4-a — Duties of the Chief Information Security Officer

New Hampshire § 21-R:4-a

Title ITHE STATE AND ITS GOVERNMENT

Ch. 21-RDEPARTMENT OF INFORMATION TECHNOLOGY

This text of New Hampshire § 21-R:4-a (Duties of the Chief Information Security Officer) is published on Counsel Stack Legal Research, covering New Hampshire primary law. Counsel Stack provides free access to over 12 million legal documents including statutes, case law, regulations, and constitutions.

Bluebook

N.H. Rev. Stat. Ann. § 21-R:4-a (2026).

Text

The chief information security officer shall be responsible for the following:

I.Chairing the cybersecurity advisory committee.

II.Developing, publishing, maintaining, and interpreting the statewide information security manual's policies and standards.

III.Developing, managing, and executing the statewide cyber disruption plan and an information security event response process.

IV.Staffing and training members of ESF-17 under the state emergency operations plan.

V.Identifying security requirements to limit the risks associated with identified executive branch business objectives as defined by the governor and the heads of state agencies.

VI.Providing information security subject matter expertise to the executive branch of the New Hampshire state government.

VII.Drafting and implemen

Free access — add to your briefcase to read the full text and ask questions with AI

The chief information security officer shall be responsible for the following:
I. Chairing the cybersecurity advisory committee.
II. Developing, publishing, maintaining, and interpreting the statewide information security manual's policies and standards.
III. Developing, managing, and executing the statewide cyber disruption plan and an information security event response process.
IV. Staffing and training members of ESF-17 under the state emergency operations plan.
V. Identifying security requirements to limit the risks associated with identified executive branch business objectives as defined by the governor and the heads of state agencies.
VI. Providing information security subject matter expertise to the executive branch of the New Hampshire state government.
VII. Drafting and implementing an information security awareness and training program to be used by all state agencies.
VIII. Providing security metrics to track the performance of the information security program.
IX. Developing an information security governance and risk program, including, but not limited to:
(a) Coordinating and conducting risk assessments of agencies and their information assets.
(b) Conducting and managing vulnerability assessments of agency networks, applications, databases, and systems.
(c) Conducting penetration tests of agency networks, applications, databases, and systems.
(d) Conducting information security risk assessments of third parties with access to state of New Hampshire information assets.
X. Serving as the chief of the New Hampshire cyber integration center.