State Cyber and Information Security Policies

 

Alabama

Department of Finance, Information Services Division
Information Security Policy
http://cybersecurity.alabama.gov/documents/Policy_600_Information_Security.pdf


Alabama

Department of Finance, Information Services Division
Cyber Security Incident Response
http://cybersecurity.alabama.gov/documents/Policy_604_Incident_Response.pdf


California:

California Technology Agency, Office of Information Security
Information Security Policies
http://www.cio.ca.gov/OIS/Government/policy.asp


Delaware

Department of Technology and Information
State of Delaware Information Security Policy (DISP)
http://dti.delaware.gov/pdfs/pp/DelawareInformationSecurityPolicy.pdf


Florida

Agency for Enterprise Information Technology, Office of Information Security
Information Security Policy -- Agency Guidelines
http://www.secureflorida.org/businesscontinuity/policies_procedures/


Georgia

Georgia Technology Authority, Office of Information Security
Information Security Policies, Standards and Guidelines
http://gta.georgia.gov/00/channel_title/0,2094,1070969_125406157,00.html


Illinois

Bureau of Communication and Computer Services
General Security for Statewide IT Resources Policy
http://bccs.illinois.gov/pdf/GeneralIT.pdf


Illinois

Bureau of Communication and Computer Services
General Security for Statewide Network Resources Policy
http://bccs.illinois.gov/pdf/General_Network_Resources_Policy.pdf


Indiana

Office of Technology
Information Security Framework
http://www.in.gov/iot/files/Information_Security_Framework.pdf


Iowa

Department of Administrative Service, Information Security Office
Information Security Policy
http://das.ite.iowa.gov/standards/documents/080318_information_security.pdf


Maine

Office of Information Technology
Information Technology Security Policy
http://www.maine.gov/oit/policies/SecurityPolicy.htm


Maryland

Department of Information Technology
Information Security Policy
http://doit.maryland.gov/support/pages/securitypolicies.aspx


Nebraska

Nebraska Information Technology Commission
Information Security Policy
http://nitc.nebraska.gov/standards/security/8-101.pdf

New Mexico

Department of Information Technology
DoIT Standards and Procedures
http://www.doit.state.nm.us/standards.html

New York

Division of Homeland Security, Office of Cyber Security
Cyber Incident Reporting Policy
http://www.dhses.ny.gov/ocs/resources/documents/Cyber-Incident-Reporting-Policy-P03-001-V3.1.pdf


New York

Division of Homeland Security, Office of Cyber Security
Information Security Policy
http://www.dhses.ny.gov/ocs/resources/documents/Cyber-Security-Policy-P03-002-V3.4.pdf


North Carolina

Office of the State Chief Information Officer
IT Policy and Governance
https://www.scio.nc.gov/mission/default.aspx

Ohio

State of Ohio Privacy & Security Information Center
State of Ohio IT Security Standards
http://privacy.ohio.gov/OhioPolicies.aspx


Oklahoma

Office of State Finance
Information Security Policy, Procedures, Guideline
http://www.ok.gov/OSF/documents/StateOfOklahomaInfoSecPPG_osf_12012008.pdf


South Carolina

South Carolina Enterprise Architecture Oversight Committee
Information Security Policy
http://www.scconsumer.gov/dsit_information_security.pdf


Tennessee

Department of Finance & Administration, Office of Information Resources
Enterprise Information Security Policies
http://www.tn.gov/finance/oir/security/docs/PUBLIC-Enterprise-Information-Security-Policies-v1-6.pdf


Washington

Department of Information Services
IT Security Policy
http://isb.wa.gov/policies/400p.doc


Washington

Department of Information Services
IT Security Standards
http://isb.wa.gov/policies/401s.doc


Washington

Department of Information Services
IT Security Guidelines
http://isb.wa.gov/policies/402g.doc


West Virginia

Office of Technology
Information Security Policy
http://www.technology.wv.gov/SiteCollectionDocuments/SecurityPol111009v21.pdf