Information Security Policies, Standards, and Procedures

Information Security Policies, Standards, and Procedures provide a comprehensive framework of business principles, best practices, technical standards, migration, and implementation strategies that direct the design, deployment, and management of Information Security for the State of Arizona.

Please note, all other Information Technology (IT) Policies, Standards, and Procedures can be found on ADOA-ASET's webpage.

P8000: Information Security

1.0 Risk Acceptance
Risk Acceptance Form Risk Assessment Questionnaire

8000 Information Security
P8000 Information Security Policies (Combined)

8110 Data Classification
P8110 - Data Classification Policy T8110 - Data Classification Policy Template S8110 - Data Classification Summary

8120 Information Security Program
P8120 - Information Security Program Policy T8120 - Information Security Program Policy Template S8120 - Information Security Program Standard S8120 - Information Security Program Summary

8130 System Security Acquisition and Development
P8130 - System Security Acquisition and Development Policy T8130 - System Security Acquisition and Development Policy Template S8130 - System Security Acquisition and Development Summary

8210 Security Awareness Training and Education
P8210 - Security Awareness Training and Education Policy T8210 - Security Awareness Training and Education Policy Template S8210 - Security Awareness Training and Education Standard S8210 - Security Awareness Training and Education Summary

8220 System Security Maintenance
P8220 - System Security Maintenance Policy T8220 - System Security Maintenance Policy Template S8220 - System Security Maintenance Standard S8220 - System Security Maintenance Summary

8230 Contingency Planning
P8230 - Contingency Planning Policy T8230 - Contingency Planning Policy Template S8230 - Contingency Planning Summary

8240 Incident Response Planning
P8240 - Incident Response Planning Policy T8240 - Incident Response Planning Policy Template S8240 - Incident Response Planning Standard S8240 - Incident Response Planning Summary

8250 Media Protection
P8250 - Media Protection Policy T8250 - Media Protection Policy Template S8250 - Media Protection Standard S8250 - Media Protection Summary

8260 Physical Security Protections
P8260 - Physical Security Protections Policy T8260 - Physical Security Protections Policy Template S8260 - Physical Security Protections Summary

8270 Personnel Security Controls
P8270 - Personnel Security Controls Policy T8270 - Personnel Security Controls Policy Template S8270 - Personnel Security Controls Summary

8280 Acceptable Use
P8280 - Acceptable Use Policy T8280 - Acceptable Use Policy Template F8280 - State Access Agreement Form (Word) F8280 - State Access Agreement Form (pdf) S8280 - Acceptable Use Summary

8310 Account Management
P8310 - Account Management Policy T8310 - Account Management Policy Template S8310 - Account Management Summary

8320 Access Controls
P8320 - Access Controls Policy T8320 - Access Controls Policy Template S8320 - Access Control Standard S8320 - Access Control Summary

8330 System Security Audit
P8330 - System Security Audit Policy T8330 - System Security Audit Policy Template S8330 - System Security Audit Standard S8330 - System Security Audit Summary

8340 Identification and Authentication
P8340 - Identification and Authentication Policy T8340 - Identification and Authentication Policy Template S8340 - Identification and Authentication Standard S8340 - Identification and Authentication Summary

8350 System and Communication Protections
P8350 - System and Communication Protections Policy T8350 - System and Communication Protections Policy Template S8350 - System and Communication Protections Standard S8350 - System and Communication Protections Summary

8410 System Privacy
P8410 - System Privacy Policy T8410 - System Privacy Policy Template S8410 - System Privacy Summary

OLD Arizona NIST Baseline Security Controls (use PRIOR to 8/1/2024)
Arizona Baseline Infrastructure Security Controls Pre-requisite (Excel) Arizona Baseline Infrastructure Security Controls 2017 (Excel)

NEW Arizona NIST Baseline Security Controls (use 8/1/2024 and AFTER)
AZRAMP Level 1 Prerequisite Control Sheet AZRAMP Level 2 Low Impact Control Sheet AZRAMP Level 3 Moderate Impact Control Sheet AZRAMP Revision 5 Delta Controls Report NIST SP 800-53 R5

Executive Orders
Executive Order 2008-10 Mitigating Cyber Security Threats

Guest Wi-Fi Terms and Conditions
Guest Wireless Network Terms of Use

Arizona Department of Homeland Security

Information Security Policies, Standards, and Procedures

P8000: Information Security

Explore this Section

You are here

Information Security Policies, Standards, and Procedures

P8000: Information Security

Explore this Section