Part 20 - INFORMATION SECURITY OPERATION MANAGEMENT
- Section 1.12.20.1 - ISSUING AGENCY
- Section 1.12.20.2 - SCOPE
- Section 1.12.20.3 - STATUTORY AUTHORITY
- Section 1.12.20.4 - DURATION
- Section 1.12.20.5 - EFFECTIVE DATE
- Section 1.12.20.6 - OBJECTIVE
- Section 1.12.20.7 - DEFINITIONS
- Section 1.12.20.8 - DOCUMENTATION OF SECURITY OPERATIONS
- Section 1.12.20.9 - SEGREGATION OF SECURITY DUTIES
- Section 1.12.20.10 - NETWORK MANAGEMENT
- Section 1.12.20.11 - PRIVILEGED ACCOUNTS MANAGEMENT
- Section 1.12.20.12 - ACCESS CONTROL POLICY
- Section 1.12.20.13 - OPERATING SYSTEM ACCESS CONTROL
- Section 1.12.20.14 - APPLICATION ACCESS CONTROL
- Section 1.12.20.15 - NETWORK ACCESS CONTROL
- Section 1.12.20.16 - USER AUTHENTICATION FOR EXTERNAL CONNECTIONS (REMOTE ACCESS CONTROL)
- Section 1.12.20.17 - DEDICATED NETWORK CONNECTIONS
- Section 1.12.20.18 - NETWORK SEGREGATION
- Section 1.12.20.19 - WIRELESS NETWORKS, BLUETOOTH, AND RADIO FREQUENCY IDENTIFICATION
- Section 1.12.20.20 - USER REGISTRATION AND MANAGEMENT
- Section 1.12.20.21 - USER PASSWORD MANAGEMENT
- Section 1.12.20.22 - PROHIBITION OF USE OF PERSONAL COMPUTING DEVICES ON STATE EQUIPMENT OR SYSTEMS
- Section 1.12.20.23 - VULNERABILITY SCANNING
- Section 1.12.20.24 - PENETRATION AND INTRUSION TESTING
- Section 1.12.20.25 - PROTECTION AGAINST MALICIOUS CODE
- Section 1.12.20.26 - SYSTEM SECURITY CHECKING
- Section 1.12.20.27 - PORTABLE DEVICES AND REMOVABLE MEDIA
- Section 1.12.20.28 - TELEPHONES AND FAX EQUIPMENT
- Section 1.12.20.29 - MODEM USAGE
- Section 1.12.20.30 - PUBLIC WEBSITES CONTENT APPROVAL PROCESS
- Section 1.12.20.31 - BUSINESS CONTINUITY
- Section 1.12.20.32 - LOG-ON BANNER
- Section 1.12.20.33 - MONITORING SYSTEM ACCESS AND USE: NO EXPECTATION OF PRIVACY
- Section 1.12.20.34 - LOST OR STOLEN IT ASSET