Wyoming Cybersecurity Audit Information Request

Alex Koma filed this request with the Department of Corrections of Wyoming.
Submitted Aug. 3, 2016
Est. Completion None
Status
No Responsive Documents

Communications

From: Alex Koma

Subject: Public Records Act Request: Wyoming Cybersecurity Audit Information Request

Email

To Whom It May Concern:

Pursuant to the Wyoming Public Records Act, I hereby request the following records:

Any overview of the results of the most recent cybersecurity audit or risk assessment conducted by the Department of Enterprise Technology Services, or by a third party on behalf of the department.

The requested documents will be made available to the general public, and this request is not being made for commercial purposes.

In the event that there are fees, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.

I recognize that these types of documents contain sensitive information about the state's networks, and could be subject to an exemption to protect public safety. However, I'm not looking for specific details on the networks or their vulnerabilities, merely any summaries or aggregated data produced for the state to get an overall picture of cybersecurity concerns.

Thank you in advance for your anticipated cooperation in this matter. I would request your response within ten (10) business days.

Sincerely,

Alex Koma

From: Mark Horan

Subject: Re: Public Records Act Request: Wyoming Cybersecurity Audit Information Request

Email

Alex,

The Wyoming Department of Corrections received your records request on
August 3. You are requesting "Any overview of the results of the most
recent cybersecurity audit or risk assessment conducted by the Department
of Enterprise Technology Services, or by a third party on behalf of the
department."

We are checking with the Department of ETS to see if 1) what findings
exist, where they can be located and in what format; and 2) if the findings
are under our authority to provide or if you would need to request the
findings directly from ETS.

If it turns out we are the custodian of the findings, we will assess what
is available from a safety and security standpoint to determine if the
findings are releasable, releasable in redacted format, or not releasable.
We will then advise you as to what we can provide, in what length and
format, and the potential cost in accordance with our *Fee Schedule for the
Release of Information* which is attached. Any production costs would need
to be paid in advance.

Thank you,
Mark

--
Mark Horan
Public Information Officer
Wyoming Department of Corrections
1934 Wyott Dr. Ste 100
Cheyenne, Wyoming 82002
(307) 777-5889
mark.horan@wyo.gov
--

E-Mail to and from me, in connection with the transaction
of public business, is subject to the Wyoming Public Records
Act and may be disclosed to third parties.

From: Mark Horan

Subject: Re: Public Records Act Request: Wyoming Cybersecurity Audit Information Request

Email

Alex,

As a follow up, the Wyoming Department of Corrections is not in possession
of any cybersecurity audit or risk assessment documents related to your
request.

Thank you,
Mark

--
Mark Horan
Public Information Officer
Wyoming Department of Corrections
1934 Wyott Dr. Ste 100
Cheyenne, Wyoming 82002
(307) 777-5889
mark.horan@wyo.gov
--

E-Mail to and from me, in connection with the transaction
of public business, is subject to the Wyoming Public Records
Act and may be disclosed to third parties.

Files

pages

 Close