Policy Advisory  Software and Application Management Policy

Date:	01/01/2025
Organization:	Cybersecurity and Enterprise Risk Management
Referenced Sources:	MGL Chapter 7D, Section 2

The Software and Application Management Policy reinforces the Commonwealth’s commitment to an effective software and application management program. This document outlines the controls that must be developed and incorporated into the software and application lifecycle, in order to safeguard assets and reduce risks posed by improper management of software and applications within the Commonwealth’s information technology environment.

Purpose

The purpose of this policy is to establish the minimum security requirements that must be implemented to develop, test, install, manage, and terminate software programs, systems and applications.