Policy Advisory  Operations Management Standard

Date:	01/01/2025
Organization:	Cybersecurity and Enterprise Risk Management
Referenced Sources:	MGL Chapter 7D, Section 2

The Operations Management Standard reinforces the Commonwealth’s commitment to an operational management strategy and outlines the controls necessary to safeguard the Commonwealth’s information assets and reduce risks.

Purpose

The purpose of this standard is to document the requirements and key information security controls for information technology operations, including the definition of standard operating procedures, change management, configuration management, release management, information backup and restoration and cloud computing.