Policies

• CITE Communication Plan
• Account Security Policy
• Network Device Policy
• Personal Wireless Hotspots Policy
• 29.01.02.R0.01 Use of Licensed Commercial Software
• 29.01.03.R0.02 Electronic Information Security
• 33.04.02.R0.01 Use of Telecommunication Service
• Email Retention

Information Security Standards

These Information Security Standards are designed to meet the requirements of 1 TAC 202.75.

• A. Acceptable Use
• B. Account Management
• C. Administrator / Special Access
• D. Application Development Security
• E. Backup / Recovery
• F. Change and Configuration Management
• G. Electronic Communication and Email Usage
• H. Encryption
• I. Firewall
• J. Incident Management
• K. Identification, Authentication, and Passwords
• L. Internet/Intranet Usage
• M. Intrusion Detection
• N. Mobile Device Security 
• O. Network Access
• P. Network Configuration
• Q. Physical Access
• R. Portable Computing
• S. Privacy 
• T. Security Monitoring
• U. Security Training and Awareness
• V. Platform Management
• W. Authorized Software
• X. System Development and Acquisition
• Y. Third Party Access
• Z. Malicious Code
• AA. Wireless Access
• AB. Vulnerability Assessment

• Server Hardening
• Confidential Databases
• HIPAA-Protected Data

• Definitions

Legal Requirements

• Gramm-Leach-Bliley Act

Disclaimer

• A&M-Commerce Disclaimer