| Date: | 01/01/2025 |
|---|---|
| Organization: | Cybersecurity and Enterprise Risk Management |
| Referenced Sources: | MGL Chapter 7D, Section 2 |
The Information Security Standard reinforces the Commonwealth’s commitment to an effective information security governance program and outlines the controls necessary to safeguard the Commonwealth’s information assets and reduce risks posed by improper management of information.
The purpose of this standard is to document the framework, principles and controls of an effective information security program, and outline the information security requirements to safeguard information assets. The Commonwealth is committed to continually improving the information security program to meet its strategic objectives and ensure that it is able to adapt to changes in the cyber threat landscape, as well as evolving organizational, legal, and regulatory requirements.
