Skip Maine state header navigation
A Publication Featuring The Information Services Technology of Maine State Government
| Volume V, Issue 8 | August 2002 |
|
|
During November 2001, the Information Services Policy Board (ISPB) established a Privacy and Security Sub-Committee to review statutory requirements for information privacy and how the State of Maine is using Information Technology (IT) in support of those laws. As this review progresses, the ISPB Sub-Committee will review IT security implications relative to information privacy. Concurrently, the Information Systems Managers Group (ISMG) has been working on specific technical aspects of IT security, such as anti-virus protection. Based on the status of the ISPB and ISMG efforts, the ISPB/ISMG Security Team was chartered in late May to review Maine State Government’s IT security policies and make recommendations to the ISPB Privacy and Security Sub-Committee.
The membership of the ISPB/ISMG Security Team includes representation from the Office of the Chief Information Officer, the Bureau of Information Services, and the Departments of Transportation, Public Safety, Human Services, Environmental Protection, and from the Judicial and Legislative branches of state government. The purpose of the Team is two-fold. First, the Team will review the State’s current IT security policies, and associated Federal requirements, to develop an Enterprise IT Security Policy for proposed adoption by the ISPB. This effort will include a review of policies adopted by other state governments, as well as standards adopted by the Joint Technical Committee of the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC). The Enterprise IT Security Policy will be comprehensive to ensure adequate security of Maine State Government data and information systems. Second, the Team will provide technical implementation recommendations to the ISMG regarding all IT security policies adopted by the ISPB. Recommended strategies to implement IT security policies will incorporate experience from other state governments and a review of related IT security techniques employed as best practices in the private sector.
The Team plans to present a draft Enterprise IT Security Policy to the ISPB during September of this year. If adopted by the ISPB, the team will develop and recommend an Enterprise IT Security Policy Implementation Plan to the ISMG during November.
Questions? Contact the author by e-mailing don.hildebrand@state.me.us.
