NRS 242.128: Duties.

The Office of Information Security and Cyber Defense shall:

1. Develop procedures for risk-based assessments that identify vulnerabilities in the information systems that are operated or maintained by state agencies and any potential threats that may exploit such vulnerabilities;

2. Based on the results of risk-based assessments, identify risks to the security of information systems that are operated or maintained by state agencies; and

3. Develop best practices for preparing for and mitigating risks to, and otherwise protecting, the security of information systems that are operated or maintained by state agencies.