Illinois Administrative Code
Title 80 - PUBLIC OFFICIALS AND EMPLOYEES
Part 4000 - MANDATORY CYBERSECURITY TRAINING
Subpart B - TRAINING REQUIREMENTS AND RESPONSIBILITIES
Section 4000.200 - Training to be Provided by Department of Innovation and Technology
Current through Register Vol. 48, No. 38, September 20, 2024
a) Every employee shall annually undergo training by the Department of Innovation and Technology concerning cybersecurity. (Section 25(b) of the Act).
b) The training shall include, but not be limited to, detecting phishing scams, preventing spyware infections and identity theft, and preventing and responding to data breaches. (Section 25(b) of the Act).
c) DoIT shall provide access to electronic-based, in-person, or paper-based cybersecurity training, with reasonable efforts made to provide training in the format requested to accommodate the needs of the employee and his or her employing agency.
d) DoIT shall establish a minimum of two training periods per year. Tentative training dates will be provided by DoIT, via electronic mail, to each Designated Contact by January 15th of each calendar year.
e) DoIT shall confirm training dates at least 60 calendar days prior to the training to each Designated Contact.