Cyber Security Policies

Colorado.gov

Department of Personnel and Administration

The Office of Cyber Security has issued the following rules and policies under the authority of 24-37.5-401 through 406, C.R.S. These policies apply to public agencies as defined in section 402 of that part.

Rules in support of the Colorado Information Security Act pdf file

P-CCSP-001, Cyber Security Program R01 pdf file

P-CCSP-002, Incident Response R01 pdf file

P-CCSP-003, IT Risk Management R01 pdf file

P-CCSP-004, Disaster Recovery R04 pdf file

P-CCSP-005, Vendor Management R02 pdf file

P-CCSP-006 Network Operations R01 pdf file

P-CCSP-007 Systems and Applications Security Operations R01 pdf file

P-CCSP-008 Access Control R01 pdf file

P-CCSP-009 Change Control R01 pdf file

P-CCSP-010 Physical Security R01 pdf file

P-CCSP-011 Data Handling and Disposal R02 pdf file

P-CCSP-012 Personnel Security R01 pdf file

P-CCSP-013 System Access and Acceptable Use R01 pdf file

P-CCSP-014 Online Privacy R01 pdf file

P-CCSP-015 Security Training and Awareness R01 pdf file

P-CCSP-016 Self Assessment R01 pdf file

P-CCSP-017 Security Metrics and Measurement R01 pdf file

P-CCSP-018 Mobile Computing R01 pdf file

P-CCSP-019 Wireless Security R01 pdf file