| Date: | 01/01/2025 |
|---|---|
| Organization: | Cybersecurity and Enterprise Risk Management |
| Referenced Sources: | MGL Chapter 7D, Section 2 |
The Access Management Standard reinforces the Commonwealth’s commitment to an effective access management strategy and outlines the controls necessary to safeguard the Commonwealth’s information assets and reduce risks posed by improper management of access.
The purpose of this standard is to document the framework, principles and controls of an effective access management strategy, and outline the access management requirements to safeguard information assets. The Commonwealth is committed to continually improving the information security program to meet its strategic objectives and ensure that it is able to adapt to changes in the cyber threat landscape, as well as evolving organizational, legal, and regulatory requirements.
