System Security Plans (SS-08-028)

Requires data and system owners to create and maintain system security plans

Systems and Development Lifecycle (PS-08-018.02)

Requirements for a formal IT lifecycle management program

Systems Operations Documentation (SS-08-027)

Requires agencies to document system operational procedures

Technology Project Management (SM-08-006)

Project management methodology for technology projects valued at $100,000 or more

Technology Project Management Guideline (GM-08-101)

Guidelines for technology project management when there is greater than $1M investment

Telecommunications Technology Review (SM-05-001)

Administering Enterprise and Agency open contracts for telecommunications systems and long distance services

Teleworking and Remote Access (SS-08-037)

Security requirements for telework and remote access to state information systems

Terms and Conditions for Cloud Services (SM-14-010 )

This standard offers a list of important components for an agency to consider inserting in a service agreement for cloud services. By no means does this list cover all situations that may be included in a service agreement; but those listed here are often overlooked by State agencies.

Third-Party Access (PS-08-011)

Provisions for third-party access to state facilities and information systems

Third-Party Security Requirements (SS-08-013)

Establishes security requirements for conducting business with contractors, outsourcing vendors and/or other third-parties