Browse by Topic

Requires security controls on public facing systems

Establishes the State’s intent to rely on electronic data as a form of official record and adherence to proscribed records retention requirements

Requires protection from risks associated with remote access

Guidelines for handling media used for data backup and for records archiving

Adopts the NIST risk management framework

Requires protection of systems from risks associated with remote access

Establishes a need to increase user security awareness through an awareness and training program

Agencies shall periodically review and continuously monitor the management, operational and technical security controls for all information systems to assess their effectiveness to determine the extent to which they are operating as intended and comply with federal, state, enterprise and agency s

Requires all employees and contractors to attend annual security awareness training

Requires log management practices