Executive Office of Technology Services and Security Policies

With all levels of government and businesses across the country urging employees to work remotely to slow the spread of the Coronavirus, now’s a good time to review the security settings of your home network and pay close attention to business-specific guidance.

This standard establishes the security requirements needed when a third party is working with the Commonwealth's confidential information.

The Third Party Risk Management Policy establishes the minimum security requirements that must be implemented to manage third-party vendors who provide any type of information technology goods and/or services, outsources applications, cloud services, and/or network and security management to the Commonwealth.

This standard reinforces the Commonwealth’s commitment to a Third-Party information security strategy and outlines the controls necessary to safeguard the Commonwealth’s information assets and reduce risks.

Whether you're hosting a team check-in or a public webinar, securing your virtual meetings is essential.

The Vulnerability Management Policy establishes the minimum security requirements that must be implemented to protect, detect and remediate vulnerabilities in the Commonwealth’s information technology environment.

This standard reinforces the Commonwealth’s commitment to a vulnerability management strategy and outlines the controls necessary to safeguard the Commonwealth’s information assets and reduce risks.

The Vulnerability Management Standard documents the requirements to protect, detect and recover from vulnerabilities in the technology environment and applies to all Executive Department offices and agencies.

Commonwealth of Massachusetts website domain policy for Mass.gov and other government websites

Select a wireless provider that provides good cellular service in the area where you plan to use the MiFi (https://www.mass.gov/doc/itt72/download). Both AT&T and Verizon Wireless offer public safety grade wireless (priority and pre-emption) for qualified users – see the ITT72 or contact your wireless provider service, account managers.