Dependency Law Finder

Revised the following to reflect the Department’s current policy and procedures, which include, but not limited to, Reference section, updated CMS and SSA guidance; Definition section, added ‘Clean Desk (Data Protection); and Chapter 2, paragraphs 2-1 and 2-3 to align policy and procedures with CMS, ARC-AMPE controls and remediate IRS Safeguard Security Report findings. November 20, 2025 CFOP 50-2 TABLE OF CONTENTS Page Chapter 1 – GENERAL.............................................................................................................. 4 1-1. Purpose........................................................................................................................... 4 1-2. Scope.............................................................................................................................. 4 1-3. Authority .......................................................................................................................... 5 1-4. Definitions ....................................................................................................................... 5 1-5. Policy Statement ............................................................................................................. 8 1-6. Dissemination.................................................................................................................. 8 Chapter 2 - SECURITY OF DATA AND INFORMATION TECHNOLOGY RESOURCES .......... 9 2-1. System Security and Access to Data .............................................................................. 9 2-2. DCF Security Awareness Policy.................................................................................... 12 2-3. Systems and Communications Protection for Confidential Data ................................... 13 2-4. Destruction Methods for Confidential and Federal Tax Information (FTI) Data.............. 14 2-5. Prohibit System and Data Access Outside the United States of America (USA) and Canada (Geo

1. Chapter 1 – GENERAL p. 4
2. 1-1. Purpose p. 4
3. 1-2. Scope p. 4
4. 1-3. Authority p. 5
5. 1-4. Definitions p. 5
6. 1-5. Policy Statement p. 8
7. 1-6. Dissemination p. 8
8. Chapter 2 – SECURITY OF DATA AND INFORMATION TECHNOLOGY RESOURCES p. 9
9. 2-1. System Security and Access to Data p. 9
10. 2-2. DCF Security Awareness Policy p. 12
11. 2-3. Systems and Communications Protection for Confidential Data p. 13
12. 2-4. Destruction Methods for Confidential and Federal Tax Information (FTI) Data p. 14
13. 2-5. Prohibit System and Data Access Outside the United States of America (USA) and p. 14
14. 2-6. Phishing Simulation and Awareness Program p. 14
15. Chapter 3 – EVENT AND INCIDENT REPORTING p. 16
16. 3-1. Purpose p. 16
17. 3-2. Security Event and Incident Reporting and Tracking p. 16
18. 3-3. External Reporting Requirements p. 17
19. Chapter 4 – USE OF WIRELESS TECHNOLOGY AND MOBILE DEVICES p. 19
20. 4-1. Purpose p. 19
21. 4-2. Mobile Devices and Wireless Networks p. 19
22. 4-3. Access Control Measures p. 21
23. Chapter 5 – PATCHING AND REBOOT OF INFORMATION TECHNOLOGY RESOURCES p. 22
24. 5-1. Purpose p. 22
25. 5-2. Scope p. 22
26. 5-3. Scheduling and Deployment p. 22
27. 5-4. Installation and Validation p. 22
28. 5-5. Exceptions p. 22
29. Chapter 6 – INSIDER THREAT PROGRAM and INCIDENT HANDLING POLICY p. 23
30. 6-1. Purpose p. 23
31. 6-2. Scope p. 23
32. 6-3. Authority p. 23
33. 6-4. Policy Statement p. 23

CFOPs it cites (3)

• CFOP 50-29 Wireless Access Page 4
• CFOP 50-30 Identity and Access Management Plan Page 9
• CFOP 60-70 Employee Separations and Reference Checks Page 10

CFOPs that cite it (12)

• CFOP 15-13 DCF Tracker Management System Page 2
• CFOP 170-1 Florida Child Welfare Practice Model Pages 148, 149
• CFOP 5-1 Numerical and Subject Index to Administrative Publications Page 2
• CFOP 50-1 Department Use of Criminal Justice Information Services and Driver and Vehicle Information Database Pages 5, 16, 28, 39
• CFOP 50-22 Acceptable Use of Information Technology Resources Pages 6, 15, 16, 18
• CFOP 50-28 Media Protection Page 9
• CFOP 50-29 Wireless Access Page 3
• CFOP 50-30 Identity and Access Management Plan Pages 6, 7
• CFOP 50-31 Policy on Privileged Access to Information Technology Resources Pages 3, 5
• CFOP 60-13 Collection and Use of Social Security Numbers by DCF Employees and Others Acting on Behalf of the Department Pages 1, 2
• CFOP 60-40, ch. 9 Alternative Work Locations Pages 1, 3, 7
• CFOP 80-2 Property Management Page 23

Florida Statutes (3)

• s. 282.318, F.S. Pages 5, 6, 14
• s. 501.171, F.S. Pages 5, 17
• s. 119.07, F.S. Page 6

Administrative Code rules (1)

• 60GG-2, F.A.C. Pages 5, 6, 12

Federal law (1)

• 5 U.S.C. 552a Page 5