Advisory  Access Management Policy

Date:	01/01/2025
Organization:	Cybersecurity and Enterprise Risk Management
Referenced Sources:	MGL Chapter 7D, Section 2

The Access Management Policy sets policy standards for implementing user access management, network access control and system authentication control in order to protect the Commonwealth's information assets and network services. 

Purpose

This document describes access management standards for the use of information, information systems, electronic and computing devices, applications, and network resources used to conduct business on behalf of the Commonwealth.