Information Technology Policies and Standards
Collection of IT related policies and guidelines. A searchable database of DOA/DoIT policies can be found [here](https://www.ri.gov/app/doa/policies/\.
Additional policies may be found on the operation site [here](http://operations.doit.ri.gov/policy/\.
Project Management
IT Project Approval - https://rigov-policies.s3.amazonaws.com/IT_01-02_Information_Technology_Application_Development_Requirements_Approval.pdf
IT Project Production Approval - https://rigov-policies.s3.amazonaws.com/IT_01-03_Information_Technology_Enhancements_Move_To_Production_Approval.pdf
IT Development Approval - http://operations.doit.ri.gov/documents/policies/QA/01-02 Information Technology Application Development Requirements Approval.pdf
IT Project Protocol - https://rigov-policies.s3.amazonaws.com/IT_Protocol_Policy.pdf
Request for IT Inventory - (2017-H 6295) - http://webserver.rilin.state.ri.us/BillText/BillText17/HouseText17/H6295.pdf
Request that IT Project Manager shall be assigned (2017-S 0458) - http://webserver.rilin.state.ri.us/BillText17/SenateText17/S0458.pdf
Configuration Management - https://rigov-policies.s3.amazonaws.com/IT_10-14_Configuration_Management_Policy.pdf
Production Control - https://rigov-policies.s3.amazonaws.com/IT_01-03_Information_Technology_Enhancements_Move_To_Production_Approval.pdf
Data
Data Categorization - https://rigov-policies.s3.amazonaws.com/IT_05-02_Data_Categorization.pdf
HIPAA - https://rigov-policies.s3.amazonaws.com/HR_DOA-HIPAA-2_DOA_HIPAA_Confidentiality_Policy.pdf
Acceptable Use - https://rigov-policies.s3.amazonaws.com/IT-00-02_Acceptable_Use_Policy.pdf
Data Encryption - https://rigov-policies.s3.amazonaws.com/IT_05-03_Data_Encryption.pdf
Drive Encryption - http://operations.doit.ri.gov/documents/techdocs/Technical Instruction 10-01.pdf
Media Handling - https://rigov-policies.s3.amazonaws.com/IT-05-01_Media_Handling_and_Security.pdf
USBs - http://operations.doit.ri.gov/documents/techdocs/Technical Instruction 05-01.pdf
Networking
Operation Handbook - http://operations.doit.ri.gov/documents/policies/Security/10-06 IT Security Handbook Operational Controls .pdf
Network Security - https://rigov-policies.s3.amazonaws.com/IT_10-15_Network_and_Communications_Security_Policy.pdf
Operating System -https://rigov-policies.s3.amazonaws.com/IT_10-02_Desktop_Operating_Systems.pdf
DNS - https://rigov-policies.s3.amazonaws.com/IT_02-07_DNS_Configuration_Standards.pdf
Email - https://rigov-policies.s3.amazonaws.com/IT_02-05_E-Mail_Configuration_Standards.pdf
Infrastructure - http://www.doit.ri.gov/policy/infrastructure.php
Social Networks - http://operations.doit.ri.gov/documents/policies/Security/10-09 Policy on Social Networking.pdf
Security
Security Handbook - (http://operations.doit.ri.gov/documents/policies/Security/10-05 IT Security Handbook Management Controls .pdf\ ; (http://operations.doit.ri.gov/documents/policies/Security/10-07 Security Handbook Technical Controls.pdf\
Incidence Response - https://rigov-policies.s3.amazonaws.com/IT_10-12_Incident_Handling_and_Response_Policy.pdf
Physical and Environmental Security - https://rigov-policies.s3.amazonaws.com/IT_10-16_Physical_and_Environmental_Security_Policy.pdf
Forensic Investigation - https://rigov-policies.s3.amazonaws.com/IT_10-08_Policy_Forensic_Investigation_and_Authorization.pdf
Audit and Accountability - https://rigov-policies.s3.amazonaws.com/IT_10-13_Audit_and_Acountability_Standard.pdf
Active Directory - https://rigov-policies.s3.amazonaws.com/IT_02-01_Active_Directory_Standard.pdf
Active Directory Groups - https://rigov-policies.s3.amazonaws.com/IT_02-04_Organizational_Units_Standards.pdf
Passwords - (https://rigov-policies.s3.amazonaws.com/IT_10-01_Enterprise_Password_Security.pdf\ , (http://operations.doit.ri.gov/documents/policies/Security/10-01 Enterprise Password Security.pdf\
Security Planning - https://rigov-policies.s3.amazonaws.com/IT_10-18_Security_Planning_Policy.pdf
Patch / Updates - https://rigov-policies.s3.amazonaws.com/IT_02-06_Patch_Management_Standards.pdf
Mobile Device Service - https://rigov-policies.s3.amazonaws.com/IT_09-01_Service_and_Support_for_Cell_Phones__Blackberries__and_Mobile_Broadband_Devices.pdf
Mobile Device Security - https://rigov-policies.s3.amazonaws.com/IT_10-04_Mobile_Device_Security_Policy.pdf
Mail - http://operations.doit.ri.gov/documents/download_docs/userGuide.pdf
Assessment
Risk Assessment - http://operations.doit.ri.gov/documents/policies/Security/10-25 Risk Assessment Policy.pdf
ORR's Cost / Benefit Guidelines - https://rigov-policies.s3.amazonaws.com/OMB_Analyzing-Regulatory-Benefits-and-Costs.pdf
Purchasing
Accounts and Control - http://controller.admin.ri.gov/Policies/index.php
Division of Purchases - http://www.purchasing.ri.gov/rulesandregulations/rulesandregulations.aspx
### State/Federal Links
Maine: http://www.maine.gov/oit/project_management/method.shtml
California: https://cdt.ca.gov/policy/simm/