The following information technology (IT) records shall be exempt from the Mississippi Public Records Act of 1983:
IT infrastructure details, including network architecture, schematics, and IT system designs;
Source code;
Detailed hardware and software inventories;
Security plans;
Vulnerability reports;
Security risk assessment details;
Security compliance reports;
Authentication credentials;
Security policies and processes;
Security incident reports; and
Any audit, assessment, compliance report, work papers or any combination of these that if disclosed could allow unauthorized access to the state's IT assets.
Structure Mississippi Code
Title 25 - Public Officers and Employees; Public Records
Chapter 61 - Public Access to Public Records
§ 25-61-1. Short title; legislative policy regarding right of access to records
§ 25-61-2. State policy regarding access to public records
§ 25-61-9. Trade secrets and confidential commercial or financial information
§ 25-61-11. Records exempted or privileged by law
§ 25-61-11.1. Exemption for private information of persons possessing a weapon permit
§ 25-61-11.2. Exemption for certain information technology records
§ 25-61-15. Penalty for wrongful denial of access to record
§ 25-61-17. Chapter not to affect legislature's regulation of own proceedings and records access