INFORMATION SECURITY PROGRAM.
Austin City Code § 2-11-16
in effect§ 2-11-16 - INFORMATION SECURITY PROGRAM.
(A) The citywide information security program is created.
(B) The chief information security officer, or staff designated by the city manager, leads the citywide information security program.
(C) Each city official and employee shall comply with the information security requirements defined in and subsequent to this chapter.
(D) The information security program shall:
(1) perform information security duties;
(2) establish and maintain a citywide information security program and information security architecture;
(3) provide leadership, strategic direction, and coordination for the citywide information security program, including the adoption, development, and management of relevant policies, programs, and associated requirements;
(4) include the following elements:
(a) a citywide information security risk management function;
(b) a citywide information security assessment and authorization function;
(c) a citywide internal information security audit function; and
(d) a citywide information security operations function, including information security incident response.
(5) establish and maintain an information security governance process;
(6) provide confidential reports and confidential briefings to city council as authorized by law; and
(7) advise city departments, city management, and city council on information security matters.
(E) The chief information security officer shall:
(1) possess professional qualifications, including training and experience, required to administer the functions described under this section; and
(2) maintain an industry-recognized, product-neutral certification with an ethical behavior clause, in information security, information privacy, or information risk for the entirety of employment in the position.
(F) The chief information security officer and information security program staff shall have direct access as permitted by law, and other regulations as appropriate, to employees, information, and systems necessary to carry out the responsibilities defined in this section.
Source: Ord. No. 20190919-017, Pt. 17, 9-30-19; Ord. No. 20250813-027, Pt. 2, 8-25-25.
Source: City of Austin, City Code and City Charter (Municode Library, library.municode.com)URL: https://library.municode.com/tx/austin/codes/code_of_ordinances?nodeId=TIT2AD_CH2-11INMA_S2-11-16INSEPRFetched: 10/27/2026