State of Texas
Department of Information Resources
Leadership for Texas Government Technology

Policies, Standards, & Guidelines

DIR's policies, standards, and guidelines:

• State Enterprise Security Plan
• User Access Study
• Acceptable Use of the Internet, E-Mail/Messages and Peer-to-Peer File Sharing
• Texas Administrative Code: Information Security Standards 1 TAC §202
  • 1 TAC §202 Changes (Updated April 24, 2006)
• Practices for Protecting Information Resources Assets (Revised September 2003)
• Security Policy Standards, Guides, Checklist & Templates (April 2006)
• Business Continuity Planning Guidelines (Revised May 2006)

Other examples of policies, standards, and guidelines:

• Federal Agency Security Practices (FASP)
  From NIST
• Management Planning Guide for Information Systems Security Auditing (.pdf format)
  From the National State Auditors Association & the U.S. General Accounting Office
• NIST Guidelines on Firewalls and Firewall Policy
• SANS Security Policy Project

This site is a reference site. The links are to provide information security professionals and business continuity planners with a comprehensive listing of references to find answers, learn, stay abreast of the newest information. Some of the information provided in these sites are from commercial vendors and are not an endorsement of any kind. They are used for informational purposes only.

Send comments and questions to the IT Security Division.