| Date: | 01/01/2025 |
|---|---|
| Organization: | Cybersecurity and Enterprise Risk Management |
| Referenced Sources: | MGL Chapter 7D, Section 2 |
The Physical and Environmental Security Policy ensures that the Commonwealth’s information assets, whether on-site or off-site, are protected against unauthorized physical access, damage, or loss due to physical and/or environmental causes.
The purpose of this policy is to establish the minimum security requirements that must be implemented to prevent damage, alteration, and/or destruction of the Commonwealth’s information processing facilities and/or their contents. This document outlines the requirements necessary to safeguard the Commonwealth’s information technology assets and reduce risks posed by unauthorized access and/or improper management of the facilities that house those assets.
