Browse by Topic

Rules of appropriate use and all other governance regarding information and data security apply to non-State issued technology devices used to access non-public State information and technology resources

Requires that changes to operational systems be controlled and monitored

Establishes requirements over outsourcing data processing facilities

Requires third-party adherence to established State security requirements

Establishes use of passwords as primary authentication mechanism

Establishes standards for protecting passwords

The Performance Lifecycle Framework for investments in information technology

Minimum processes to manage IT investments using the Enterprise Performance Lifecycle

Formal investment reviews at predetermined points in IT investment lifecycle

Standards for verifying identities of state personnel and contractors