Resources
Special Review: CDCR’s Office of Internal Affairs Information Security
Enclosed is the final report of a special review conducted by the Office of the Inspector General into the California Department of Corrections and Rehabilitation's information security over internal affairs investigations. Specifically, we assessed whether the department's Office of Internal Affairs (OIA) takes appropriate security measures to protect personal, confidential, and sensitive data from unauthorized access or use and whether OIA maintains proper accountability of its laptop computers. The review found that OIA violated numerous state rules by not adequately protecting the personal, sensitive, and confidential data stored on its agents' laptop computers. In addition, OIA agents and managers are violating state requirements by sending emails with confidential material to unsecured email addresses...