Chapter Twelve: Computer and Information Services Policies
Operating
- Op12.01 Cellular/Wireless Service Policy and Procedures
- Op12.02 Information Technology Policies
- Op12.02-1 Acceptable Use
- Op12.02-2 Accessibility
- Op12.02-3 Computers/Networks
- Op12.02-4 E-Mail Communications
- Op12.02-5 General Disclaimers
- Op12.02-6 Media
- Op12.02-7 Other Resources
- Op12.02-8 Privacy
- Op12.02-9 Reporting Violations
- Op12.02-10 Sanctions for Misuse
- Op12.02-11 Web
- Op12.02-12 Commercial Activity
- Op12.03 Office of Publications Policies
- Op12.04 Postal Services Policies
- Op12.05 Printing Services Policies
- Op12.06 Telecommunications Services Policies
- Op12.07 Information Security Policies
- Op12.07-1 Information Security Unit Organization
- Op12.07-2 Risk Assessment and Management
- Op12.07-3 Information Management
- Op12.07-4 Employee Information Access Policy
- Op12.07-5 Physical Security
- Op12.07-6 Network and Computer Infrastructure
- Op12.07-7 Software Application Development
- Op12.07-8 Identity and Access Management
- Op12.07-9 Component Integration and Removal
- Op12.07-10 Awareness and Training
- Op12.07-11 Information Security Incident Management
- Op12.07-12 Disaster Recovery of Core Systems
- Op12.07-13 Compliance
- Op12.07-14 Data Classification Levels
- Op12.07-15 HIPAA Security Rule Policy