IT Security Governance

Contingency Planning and Business Recovery Model

Risk Management

• IT Security Roles and Responsibilities

• Business Impact Analysis

• IT System and Data Sensitivity Classification

• IT System Inventory and Definition

• Risk Assessment

• Security Audits

• Continuity of Operations Planning

• IT Disaster Recovery Planning

• IT System and Data Backup and Restoration

Information Systems Security

• IT System Hardening

• IT Systems Interoperability Security

• Malicious Code Protection

• IT Systems Development Life Cycle Security

• IT System Application Security
• Wireless Security Standard
• Local Area Network Security Guidelines

Logical Access Control

• Account Management

Data Protection   

Facilities Security

Personnel Security

• Access Determination and Control

  • Third Party Non-disclosure Guideline

• IT Security Awareness Training

• Acceptable Use

• Electronic Communications Standard

Threat Management

IT Asset Management

• IT Asset Control

• Software License Management

• Configuration Management and Control

Information Technology Audit Plan

• VCCS IT Security 3 Year Audit Plan