California Senate Bill 272 (SB 272) requires local agencies to make a catalog of application software – also known as enterprise systems – publicly available.
SB 272 defines an “enterprise system” as a software application or computer system that collects, stores, exchanges, and analyzes information that the agency uses that is both:
- A multi-departmental system or system that contains information collected about the public
- A system that serves as a “system of record” or an original source of data within an agency
Under SB 272, enterprise systems do not include information technology (IT) security systems (including firewalls and other cybersecurity systems); physical access control systems; employee identification management systems; video monitoring and other physical control systems; infrastructure and mechanical control systems (including those that control or manage street lights, electrical, natural gas, water, or sewer functions); systems related to emergency services (such as 911 dispatch and operations); or data and information that would reveal vulnerabilities to, or otherwise increase the potential for an attack on, the agency’s IT system.
A copy of RGS’ Enterprise System Catalog can also be obtained by emailing email@example.com.