Colorado § 24-37.5-405 - Security incidents - authority of chief information security officer.
Full text of Colorado Colorado Revised Statutes § 24-37.5-405 — Security incidents - authority of chief information security officer., with citation guidance and answers to common questions.
§ 24-37.5-405. Security incidents - authority of chief information security officer.
(1) A security incident in a public agency shall be reported to the chief information security officer in accordance with state incident reporting policies, standards, and guidelines.
(2) The chief information security officer shall be authorized to temporarily discontinue or suspend the operation of a public agency's communication and information resources in order to isolate the source of a security incident. The officer shall give notice to the governor, or the lieutenant governor in the event the governor is not available, the chief information officer, and the head of the public agency concurrent with such discontinuation or suspension of operations. The officer shall ensure, to the extent possible, the continuity of operations for the communication and information resources that support the operations and assets of the public agency.
(3) The chief information security officer may enter into contracts with a private person or entity to assist with resolving a security incident in a public agency. The officer shall establish an approved list of certified private persons and entities that may provide contract services in the event of a security incident. The officer shall establish criteria for the placement of private persons and entities on the list and shall select such persons and entities for placement on the list utilizing a request for proposals containing such criteria.
(4) Public agencies shall comply and cooperate with a directive of the chief information security officer pursuant to subsection (2) of this section to temporarily discontinue or suspend the operation of a public agency's communication and information resources.
Source: L. 2006: Entire part added, p. 1718, § 1, effective June 6. L. 2011: (2) amended, (SB 11-062), ch. 128, p. 432, § 10, effective April 22.
Source: official Colorado text · Last verified 2026-08-27
Frequently Asked Questions About Colorado § 24-37.5-405
What does Colorado Revised Statutes § 24-37.5-405 cover?
Section 24-37.5-405 ("Security incidents - authority of chief information security officer.") is part of the Colorado Revised Statutes, the codified statutory law of Colorado. It sets out the legal rule or procedure described in the text above. Statutes are amended regularly, so always verify against the official source.
How do I cite Colorado § 24-37.5-405?
A common citation format is "Colorado Revised Statutes § 24-37.5-405" (Colorado). Legal writing may require the code abbreviation, section number, and year or edition. Match the style required by your court, professor, or publisher.
Is this the official text of Colorado law?
No. This page is for research and education and may not include the most recent amendments. For official current law, check the Colorado official source linked on this page or consult a licensed Colorado attorney.
How does Colorado § 24-37.5-405 apply to my situation?
Statutes are interpreted in context, and application depends on your specific facts. Only a licensed attorney in Colorado can advise on how this section applies to you. Contact your state or local bar association for a referral.
Sources & Verification
Not legal advice. Verify against the official source and consult a licensed attorney in Colorado.