New Mexico Administrative Code
Title 1 - GENERAL GOVERNMENT ADMINISTRATION
Chapter 12 - INFORMATION TECHNOLOGY
Part 20 - INFORMATION SECURITY OPERATION MANAGEMENT
Section 1.12.20.33 - MONITORING SYSTEM ACCESS AND USE: NO EXPECTATION OF PRIVACY
Current through Register Vol. 35, No. 6, March 26, 2024
A. Consistent with applicable law, the agency reserves the right to monitor, inspect, and search at any time, all agency information systems and equipment used by agency users. Since agency computers and networks are provided for state business purposes, agency staff and any contractor(s) specifically allowed limited use of state systems or equipment shall have no expectation of privacy with regard to the information stored in or sent through the state information systems. Agency management may remove from its information systems any material unauthorized by the agency or by state statute.
B. Systems and applications shall be monitored and analyzed by agency ISO or agency designated IT staff to detect deviation from the state access control policy.
C. Events shall be recorded to provide evidence of misuse and to reconstruct lost or damaged data by the agency system administrator.
D. Audit logs shall be used to record user activities and other security-relevant events.
E. Audit log reports shall be produced to agency CIO and ISO and kept consistent with agency record retention schedules.
