Skip to main content
NY.gov Portal State Agency Listing

ITS policies on Security


Issued NYS IT Policies, standards and best practice guidelines have been published and are currently in effect.




Category Date Published Last Updated No. Titlesort icon
Security February 21, 2014 February 21, 2014 NYS-S14-005 Security Logging Standard (WORD)
Security February 21, 2014 February 21, 2014 NYS-S14-005 Security Logging Standard (PDF)
Security May 10, 2010 May 16, 2014 NYS-G10-001 Secure Use of Social Media Guideline (WORD)
Security May 10, 2010 May 16, 2014 NYS-G10-001 Secure Use of Social Media Guideline (PDF)
Security October 18, 2013 October 17, 2014 NYS-S13-001 Secure System Development Life Cycle Standard (WORD)
Security October 18, 2013 October 17, 2014 NYS-S13-001 Secure System Development Life Cycle Standard (PDF)
Security April 18, 2014 April 18, 2014 NYS-S14-008 Secure Configuration Standard (Word)
Security April 18, 2014 April 18, 2014 NYS-S14-008 Secure Configuration Standard (PDF)
Security October 18, 2013 October 17, 2014 NYS-S13-002 Secure Coding Standard (WORD)
Security October 18, 2013 October 17, 2014 NYS-S13-002 Secure Coding Standard (PDF)
Security October 18, 2013 October 17, 2014 NYS-S13-003 Sanitization/Secure Disposal Standard (WORD)
Security October 18, 2013 October 17, 2014 NYS-S13-003 Sanitization/Secure Disposal Standard (PDF)
Security April 18, 2014 April 18, 2014 NYS-S14-010 Remote Access IT Standard (Word)
Security April 18, 2014 April 18, 2014 NYS-S14-010 Remote Access IT Standard (PDF)
Security April 18, 2014 April 18, 2014 NYS-S14-009 Mobile Device Security Standard (Word)
Security April 18, 2014 April 18, 2014 NYS-S14-009 Mobile Device Security Standard (PDF)
Security January 17, 2014 January 17, 2014 NYS-S14-001 Information Security Risk Management Standard (WORD)
Security January 17, 2014 January 17, 2014 NYS-S14-001 Information Security Risk Management Standard (PDF)
Security April 18, 2003 October 17, 2014 NYS-P03-002 Information Security Policy (WORD)
Security April 18, 2003 October 17, 2014 NYS-P03-002 Information Security Policy (PDF)
Security October 18, 2013 October 18, 2013 NYS-P13-001-A Information Security Exception Request Form (PDF)
Security October 18, 2013 September 19, 2014 NYS-P13-001 Information Security Exception Policy (Word)
Security October 18, 2013 September 19, 2014 NYS-P13-001 Information Security Exception Policy (PDF)
Security October 10, 2008 January 17, 2014 NYS-S14-003-A Information Security Controls Standard, Appendix A (XLS)
Security October 10, 2008 January 17, 2014 NYS-S14-003 Information Security Controls Standard (PDF)
Security October 10, 2008 September 19, 2014 NYS-S14-002 Information Classification Standard (Word)
Security October 10, 2008 September 19, 2014 NYS-S14-002 Information Classification Standard (PDF)
Security October 18, 2013 September 19, 2014 NYS-S13-004 Identity Assurance Standard (Word)
Security October 18, 2013 September 19, 2014 NYS-S13-004 Identity Assurance Standard (PDF)
Security October 5, 2010 September 19, 2014 NYS-P10-006 Identity Assurance Policy (Word)
Security October 5, 2010 September 19, 2014 NYS-P10-006 Identity Assurance Policy (PDF)
Security March 21, 2014 March 21, 2014 NYS-S14-007 Encryption Standard (WORD)
Security March 21, 2014 March 21, 2014 NYS-S14-007 Encryption Standard (PDF)
Security November 18, 2013 November 18, 2013 NYS-S13-005 Cyber Incident Response Standard (Word)
Security November 18, 2013 November 18, 2013 NYS-S13-005 Cyber Incident Response Standard (PDF)
Security February 12, 2010 May 16, 2014 NYS-S10-001 CPE Requirements for ISOs/Designated Security Representatives Standard (WORD)
Security February 12, 2010 May 16, 2014 NYS-S10-001 CPE Requirements for ISOs/Designated Security Representatives Standard (PDF)
Security February 21, 2014 February 21, 2014 NYS-S14-004 Collaborative Computing Device Standard (Word)
Security February 21, 2014 February 21, 2014 NYS-S14-004 Collaborative Computing Device Standard (PDF)
Security March 21, 2014 August 15, 2014 NYS-S14-006 Authentication Tokens Standard (WORD)
Security March 21, 2014 August 15, 2014 NYS-S14-006 Authentication Tokens Standard (PDF)
Security August 15, 2014 August 15, 2014 NYS-S14-013 Account Management / Access Control Standard (Word)
Security August 15, 2014 August 15, 2014 NYS-S14-013 Account Management / Access Control Standard (PDF)
Security January 17, 2014 March 21, 2014 NYS-P14-001 Acceptable Use of Information Technology (IT) Resources Policy (Word)
Security January 17, 2014 March 21, 2014 NYS-P14-001 Acceptable Use of Information Technology (IT) Resources Policy (PDF)