CA AB3091

Requires every information security officer appointed on or after January 1, 2021, to complete a basic training course within their first three months of appointment offered by the Office of Information Security.

Mandates the Chief of the Office of Information Security to create and provide the basic training course for information security officers.

Amends Government Code Sections 11546.1 and 11549.3 to add these training requirements to existing information security governance and program responsibilities.

Changes pronoun references from "his or her" to "the [title]'s" throughout the affected code sections for neutral language.