Iowa Administrative Code
Agency 721 - Secretary of State
Division II - Elections
Chapter 29 - Elections Technology Security
Rule 721-29.2 - Cybersecurity Training
Current through Register Vol. 47, No. 6, September 18, 2024
(1) All users who access the I-Voters database must complete annual training programs on principles of cybersecurity. Upon completion of the training, a user shall transmit proof of completion to the state registrar. The state registrar shall maintain a list of approved training programs on the secretary of state's website. The state registrar shall consult with the OCIO or the federal Election Assistance Commission before adding trainings to the list of approved programs. If requested by the office of the chief information officer, the federal Election Assistance Commission, or a county registrar, the state registrar may review and add recommended cybersecurity training programs to the approved list.
(2) The state registrar may disable any user account if the user does not complete the training within 30 days of access granted, or on the anniversary date set by the state registrar.
(3) The state registrar may temporarily waive this requirement for any user if the state registrar believes it is necessary to the execution of the election.