Executive Order 43 (2007)

Protecting the Security of Sensitive Individual Information in Executive Branch Operations

Importance of the Initiative

Identity theft is an increasingly common crime and a growing concern for our residents.  State government agencies maintain sensitive individual information.   Technological advances mean that vast amounts of sensitive data can now be contained on a key chain sized flash drive, on a memory stick, or on a laptop.  It is imperative that protecting an individual’s information in the work of the executive branch of state government receive attention at the highest level. 

Given recent high profile security breaches by both public agencies and private companies, we must prevent similar problems in Virginia state government and redouble our efforts to ensure the protection of Virginians’ sensitive individual information. 

Accordingly, it is appropriate that a cabinet level official, accountable directly to the Governor, be charged with ensuring compliance with established Commonwealth Information Security Policies and Standards in order to protect our citizens’ sensitive individual information.  The public expects no less from its state government. 

The Responsibility of the Secretary of Technology

Under the authority vested in me by Article V of the Constitution of Virginia and by Title 2.2 of the Code of Virginia, I hereby empower the Secretary of Technology to coordinate and oversee all efforts within the executive branch, in every secretariat, agency, institution, board, commission, and other entity to ensure compliance with established Commonwealth Information Security Policies and Standards so that protection of sensitive individual information is appropriate and that privacy is respected to the maximum extent possible.  The Secretary shall be assisted by a senior level staff member of each cabinet area and shall convene an appropriate working group on Information Security Practices.

The Secretary shall include legislative, judicial, and independent agencies in the workgroup upon request by the agencies.

I further direct the Secretary of Technology to report annually to the Governor by October 15 of each year on the information security compliance efforts undertaken pursuant to this executive order.

Effective Date of the Executive Order

This Executive Order shall be effective upon signing, and shall remain in full force and effect unless amended or rescinded by further executive order. 

Given under my hand and under the Seal of the Commonwealth of Virginia, this 9th day of January 2007.

/s/ Timothy M. Kaine, Governor

Attest:

/s/ Secretary of the Commonwealth