Effective 23.2.1998

• vision, mission, objectives, and functions
• definitions
• role and responsibilities

• operational framework
• network connection
• security
• IP addressing
• domain naming
• services access
• technology standards

• data standard
• electronic government domain
• information update
• e-mail
• firewall
• state IT resource security
• use of approved software
• acceptable use
• anti-virus

Anti-viral

1. File Transfer

Any file transferred electronically into any State owned computers must be scanned for virus infection before, during or immediately after the transfer. All transferred files must be scanned prior to execution or use.

2. Periodic System Checks

All equipment and software must be scanned at predefined time intervals to ensure that the environment is free of any virus corruption.

3. Virus Detection Software

All equipment and software must execute a standard virus scan product approved by the State Computer Services Department (SCSD). The scanner must be executed as part of an approved plan.

4. Virus Introduction

No person shall write, distribute or introduce any software known or suspected to be infected into the State computing environment.

Each infestation must be reported to the SCSD. The following information must be collected and reported in order to properly track and eradicate each occurrence:

• Virus name or type

• Software used to detect the infection

• Extent of infection (single PC, LAN, server, mini computer, etc.)

• Source of virus

• Potential recipients of infected material

• Steps taken (or planned) to disinfect