ITS Policies

Statewide technology policies and guidelines set standards and define best practices for the State's IT community. All statewide technology policies are available by category and can be ordered by number, date published, and date modified date.
 
A complete listing of defined terms for NYS Information Technology Policies, Standards, and Best Practice Guidelines is available in the "NYS Information Technology Policies, Standards, and Best Practice Guidelines Glossary"

More information about the process for establishing NYS policies is available in the Process for Establishing Enterprise Information Technology Standards(NYS-P09-002) and also located in the Development of Enterprise IT Policies (NYS-P09-003). To request an archived policy, contact policy@its.ny.gov.

Category Date Published Last Updated No. Title
Policy 10/01/2009 10/01/2009 NYS-P09-003 Development of Enterprise IT Policies
Policy 01/14/2009 04/29/2011 NYS-P08-002 Authority to Establish State Enterprise Information Technology (IT) Policy, Standards and Guidelines
IT Standards 03/01/2004 03/01/2004 NYS-P04-001 Principles Governing the New York State Information Technology Enterprise Architecture
IT Standards 06/17/2002 10/09/2009 NYS-G02-001 Internet Privacy Guideline
IT Standards 10/01/2009 06/01/2010 NYS-P09-002 Process for Establishing Enterprise Information Technology Standards
Electronic Records 04/01/1996 04/01/1996 96-7 Electronic Data Interchange (PDF)
Electronic Records 05/01/2004 12/20/2013 NYS-G04-001 Revised Electronic Signatures and Records Act (ESRA) Guidelines
Network Services 04/03/2003 04/03/2003 NYS-P03-001 NYS Directory Services - Directory Account Management
Network Services 10/05/2010 10/05/2010 NYS-P10-005 Enterprise Identity Management (EIM) Governance Authority
Network Services 12/28/1997 11/27/2012 NYS-S97-008 NYeNet IP Addressing
Procurement 10/29/2010 04/17/1998 98-3 Technology Acquisitions Review Procedures and Guidelines (HTM)
Procurement 04/01/2008 07/12/2010 NYS-P08-001 Plan to Procure
Privacy 10/15/2009 03/29/2012 NYS-P09-004 Social Security Number (SSN) Initiative: Remediation Policy on Printing Full SSNs
Privacy 08/07/2010 12/20/2013 NYS-P10-004 Guidance for the Use of SSNs by State Government Entities
GIS 09/17/1996 05/01/2010 NYS-P10-002 Geographic Information Systems
GIS 07/17/1997 05/01/2010 NYS-P10-003 GIS Data Sharing
Web and Digital Government 05/17/2010 11/14/2012 NYS-P08-005 Accessibility of Web-Based Information and Applications – Haitian Creole
Web and Digital Government 03/25/2005 03/25/2005 NYS-P10-001 Advertisements, Endorsements and Sponsorships on State Entity Websites
Web and Digital Government 05/17/2010 11/04/2012 NYS-P08-005 Accessibility of Web-Based Information and Applications – Italiano
Web and Digital Government 05/07/2010 11/14/2012 NYS-P08-005 Accessibility of Web-Based Information and Applications – Korean
Web and Digital Government 09/10/2010 10/20/2010 NYS-P08-005 Accessibility of Web-Based Information and Applications Compliance Reporting
Web and Digital Government 05/17/2010 11/14/2012 NYS-P08-005 Accessibility of Web-Based Information and Applications – Russian
Web and Digital Government 05/17/2010 11/14/2012 NYS-P08-005 Accessibility of Web-Based Information and Applications – Chinese
Web and Digital Government 05/17/2010 11/14/2012 NYS-P08-005 Accessibility of Web-Based Information and Applications – Spanish
Web and Digital Government 04/11/2007 11/27/2012 NYS-G07-002 Best Practice Guideline on Webcasting Open Meetings
Web and Digital Government 08/22/2005 11/14/2012 NYS-S05-002 Contact Web Page
Web and Digital Government 08/01/2005 12/28/2010 NYS-S05-001 State Common Web Banner
Web and Digital Government 11/16/2010 11/16/2010 NYS-P08-005 FAQ for Accessibility Compliance Reporting
Web and Digital Government 08/24/2007 11/27/2012 NYS-S07-001 Mandatory Technology Standard on Webcasting Open Meetings
Web and Digital Government 10/20/2010 11/16/2010 NYS-P08-005 2010 NYS Accessibility Coordinator Listing
Web and Digital Government 10/20/2011 11/14/2012 NYS-P11-001 Social Media Policy
Web and Digital Government 05/17/2010 11/27/2012 NYS-P08-003 Domain Names for State Government Entities
Technology Development/Use 03/09/2009 07/27/2011 NYS-P09-001 State Agency Use of Supercomputing Resources
Technology Development/Use 04/17/1998 08/30/2011 NYS-P98-003 NYS-P98-003 Date/Time Conversion Contract Language Policy (PDF)
Technology Development/Use 04/11/2014 04/15/2014 NYS-S14-011 Enterprise Mobile Management Technical Standard
Technology Development/Use 04/11/2014 04/15/2014 NYS-S14-012 Bring Your Own Device (BYOD)
Security 08/01/2007 03/20/2015 NYS-S14-007 Encryption Standard
Security 02/12/2010 05/16/2014 NYS-S10-001 CPE Requirements for ISOs/Designated Security Representatives Standard
Security 01/17/2014 03/20/2015 NYS-P14-001 Acceptable Use of Information Technology (IT) Resources Policy
Security 04/18/2014 04/18/2014 NYS-S14-010 Remote Access Standard
Security 11/18/2013 03/20/2015 NYS-S13-005 Cyber Incident Response Standard
Security 01/16/2015 01/16/2015 NYS-S15-001 Patch Management Standard
Security 10/10/2008 09/19/2014 NYS-S14-002 Information Classification Standard
Security 05/10/2010 05/16/2014 NYS-G10-001 Secure Use of Social Media Guideline
Security 01/16/2015 01/16/2015 NYS-S15-002 Vulnerability Scanning Standard
Security 10/10/2008 01/16/2015 NYS-S14-003 Information Security Controls Standard
Security 01/17/2014 01/16/2015 NYS-S14-001 Information Security Risk Management Standard
Security 04/18/2003 02/20/2015 NYS-P03-002 Information Security Policy
Security 10/18/2013 09/19/2014 NYS-S13-004 Identity Assurance Standard
Security 04/18/2014 04/18/2014 NYS-S14-009 Mobile Device Security Standard
Security 10/18/2013 10/17/2014 NYS-S13-003 Sanitization/Secure Disposal Standard
Security 10/18/2013 10/17/2014 NYS-S13-002 Secure Coding Standard
Security 04/18/2014 04/18/2014 NYS-S14-008 Secure Configuration Standard
Security 02/21/2014 02/20/2015 NYS-S14-005 Security Logging Standard
Security 10/18/2013 10/17/2014 NYS-S13-001 Secure System Development Life Cycle (SSDLC) Standard
Security 10/05/2010 09/19/2014 NYS-P10-006 Identity Assurance Policy
Security 08/15/2014 08/15/2014 NYS-S14-013 Account Management / Access Control Standard
Security 03/21/2014 03/20/2015 NYS-S14-006 Authentication Tokens Standard
Security 10/18/2013 09/19/2014 NYS-P13-001 Information Security Exception Policy