OAR 166-017-0055: Security Standards

Agency electronic records systems that maintain official copies of public records must meet the following minimum security requirements: (1) Provide a method for all authorized users of the system to retrieve desired records. (2) Provide an appropriate level of security to ensure the integrity of the records. Security controls must include, at a minimum, physical and logical access controls, backup and recovery procedures, file integrity monitoring and training for custodians and users.