| Date: | 01/01/2025 |
|---|---|
| Organization: | Cybersecurity and Enterprise Risk Management |
| Referenced Sources: | MGL Chapter 7D, Section 2 |
The Incident Response Policy establishes the minimum security requirements that must be implemented to protect the Commonwealth’s information assets in the event of a cybersecurity incident, data breach, or other security compromise of the Commonwealth’s information assets.
The purpose of this policy is to establish the minimum security requirements that must be implemented to protect the Commonwealth’s information assets in the event of a cybersecurity incident, data breach, or other security compromise of the Commonwealth’s information assets. This policy reinforces the Commonwealth’s commitment to an effective cyber incident response program, and outlines the framework, principles, and controls required to ensure the protection of the Commonwealth’s information technology environment.
