Agency electronic records systems that maintain official copies of public records must meet the following minimum security requirements:

1. (1) Provide a method for all authorized users of the system to retrieve desired records.
2. (2) Provide an appropriate level of security to ensure the integrity of the records. Security controls must include, at a minimum, physical and logical access controls, backup and recovery procedures, file integrity monitoring and training for custodians and users.

Statutory/Other Authority

ORS 192.050, 192.060 & 192.105

Statutes/Other Implemented

357.825(2), 357.855 & 357.895

History

OSA 1-2016, f. & cert. ef. 5-5-16