Security Controls Review and Assessment (PS-08-029.02)

Agencies shall periodically review and continuously monitor the management, operational and technical security controls for all information systems to assess their effectiveness to determine the extent to which they are operating as intended and comply with federal, state, enterprise and agency s

Security Education and Awareness (SS-08-012)

Requires all employees and contractors to attend annual security awareness training

Security Log Management (PS-08-022)

Requires log management practices

Separate Production and Development Environments (SS-08-031)

Establishes requirements for separating operational environments from test/development environments

Separation of Production and Development Environments (PS-08-020)

Requires separation of production from development and test environments

Social Media Guidelines (GM-11-002)

Guidelines to Use Social Media

Social Media Responsible Use (SM-25-001)

Establishes common standards when communicating and interacting through social media channels

Software Management Standard (SM-19-001)

Provides direction regarding the acquisition, use, distribution and redistribution of commercial, public domain, and State-authored software and Software Licenses.

Statewide Data Sharing (PM-07-003)

Provides for sharing of data among agencies

Strong Password Use (SS-08-008)

Establishes standards for creating and using strong passwords