Browse by Topic

Domain Name and SSL Certificate supplemental document for SA-03-007 Georgia.Gov Domain Name.

Establishes requirements for GTA's authorization of technology procurement

Guidelines for seeking GTA's Endorsement of Technology

Requirements for information security incident response and reporting

Requires IT systems to be assessed by an independent third-party

Requires to use GTA contracts for assurance services for projects with budgets of $1 million or greater

Requires a risk-based approach to information security management

Improves how security controls are managed within the State’s shared-service environment. The Security Control Policy addresses this business challenge by establishing clearer lines of delineation between security controls, ownership and the overall responsibility of execution.

In accordance with the Information Security Control Policy, each agency operating within a shared-service environment is responsible for ensuring that applicable NIST 800-53 (rev. 4) security controls are implemented and operated effectively.