State of Ohio IT Rules, Directives, Policies,

Standards, Procedures & Bulletins

 
  red line
About Us
Enterprise IT Architecture & Policy Home
IT Policy Management Section
IT Standards Management Section
IT Law & Policy Section
 
Resources
Rules, Directives, Policies, Standards, Procedures & Bulletins
Enterprise IT Architecture & Policy News
Electronic Signature Rule
IT Policy FAQs
IT Rule FAQs
Policy Resources
Standards Resources
Contact Us
 
Please Note

To view information in portable document format (.pdf), you must have Adobe Reader installed on your computer. Click here to download a free copy of Adobe Reader.

To view information in MS Word, you must have MS Word 2003 or later or Word Viewer 2003 installed on your computer. Click here to download a free copy of Word Viewer 2003.

   
 
   
 
Click the links above to go to the section of this page on Ohio's IT-related statutes and administrative rules; the Governor's orders and directives; or enterprise IT policies, standards, procedures or bulletins.
   
  This site is the official register of State of Ohio information technology (IT) policies, standards and bulletins and OIT enterprise procedures. In addition, the Enterprise IT Architecture & Policy program publishes Ohio IT statutes and administrative rules on this page as a convenience to state agencies. Statutes are referred to as the Ohio Revised Code (ORC), and administrative rules are referred to as the Ohio Administrative Code (OAC).
   
  Recent Additions
   
  New publications added since April 6, 2009, include the following:
      blue bullet
       
Governor's Management Directive: Accessing Confidential Personal Information Maintained by the State (04-06-2009)
         
      Blue bullet
   
 

Ohio IT Statutes & Administrative Rules

  red line
   
  ORC 125.18 Office of Information Technology
 
  ORC 1306 Uniform Electronic Transactions Act
   
  State Agency-Specific Provisions
   
  ORC 1306.20 
State agency provisions
   
  ORC 1306.21  Rules for state agency use of electronic records or  electronic signatures
   
  ORC 1306.23  Exemptions to public records laws
   
  Administrative Rule on Electronic Signatures
 
 

OAC 123:

3-1-01 

Use of Electronic Signatures and Records
Important additional information
   
  ORC 1347 Personal Information Systems
 
 
   
  Governor's Orders & Management Directives
  red line
     
04-6-2009 Accessing Confidential Personal Information Maintained by the State (.pdf)
       
    ORC 1347.15 Implementation Plan Template (.doc)
     
 
   
 

State of Ohio IT Policies

  red line
   
  IT Governance Policies — A Series
   
  ITP-A.1 Authority of the State Chief Information Officer to Establish Policy Regarding the Acquisition and Use of Computer and Telecommunications Products and Services (.pdf)
 
  ITP-A.5 RESCINDED Software Copies and Copyrights (.pdf)
 
  ITP-A.26 Software Licensing (.pdf)
   
  Security Policies — B Series
   
  ITP-B.1 Information Security Framework (.pdf)
  Audit Checklist • Tips • White Paper • User Requirements
 
  ITP-B.2 Boundary Security (.pdf)
  Audit Checklist • Tips • White Paper • User Requirements
 
  ITP-B.3 Password-PIN Security (.pdf)
  Audit Checklist • Tips • White Paper • User Requirements
 
  ITP-B.4 Malicious Code Security (.pdf)
  Audit Checklist • Tips • White Paper • User Requirements
 
  ITP-B.5 Remote Access Security (.pdf)
  Audit Checklist • Tips • White Paper • User Requirements
 
  ITP-B.6 Internet Security (.pdf)
  Audit Checklist • Tips • White Paper • User Requirements
 
  ITP-B.7 Security Incident Response (.pdf)
  Audit Checklist • Tips • White Paper • User Requirements
 
  ITP-B.8 Security Education and Awareness (.pdf)
  Audit Checklist • Tips • White Paper • User Requirements
 
  ITP-B.9 Portable Computing Security (.pdf)
  Audit Checklist • Tips • White Paper • User Requirements
 
  ITP-B.10 Security Notifications (.pdf)
  Audit Checklist • Tips • White Paper • User Requirements
 
  ITP-B.11 Data Classification (.pdf)
  Audit Checklist • Tips • User Requirements
    Data Classification Resource Kit (.pdf)
   
  ITP-B.12 Intrusion Prevention and Detection (.pdf)
    Audit Checklist • Tips • White Paper • User Requirements
   
  IT Project Lifecycle Policies — D Series
   
  ITP-D.4 Information Technology Planning (.pdf)
   
  IT Asset Management Policies — E Series
   
  ITP-E.1 Disposal, Servicing and Transfer of IT Equipment (.pdf)
  Audit Checklist
 
  ITP-E.7 Business Resumption Planning (.pdf)
  IT Business Continuity Planning Guideline (replaces ITP-E.7)
 
  ITP-E.8 Use of Internet, E-mail and Other IT Resources (.pdf)
  Audit Checklist
 
  ITP-E.30 Electronic Records (.pdf)
  Audit Checklist
   
  Internet/Intranet Policies — F Series
   
  ITP-F.1 Registration of Internet Domain Names (.pdf)
 
  ITP-F.3 Web Site Accessibility (.pdf)
 
  ITP-F.4 Executive Branch Cabinet Agency Web Site Standardization (.pdf)
 
  ITP-F.35 Advertisements, Endorsements, and Sponsorship on State-Controlled Web Sites (.pdf)
 
  Telecommunication Policies — H Series
   
  ITP-H.2 Use of State Telephones (.pdf)
 
  ITP-H.6 Telecommunications Utility Services (.pdf)
   
 
   
 

State of Ohio IT Standards

  red line
   
  Network Standards — NET Series
   
ITA-NET-01 802.11 Wireless Local Area Network Technical Architecture (.pdf)
 
  ITS-NET-01 802.11 Wireless Local Area Network Standard (.pdf)
 
  Platform Standards — PLF Series
 
  ITS-PLF-01 Enterprise Client Computer Hardware Standard (.pdf)
   
  ITS-PLF-02      RESCINDED  Enterprise Notebook Hardware Standard (.pdf)
  (see ITS-PLF-01)
 
  ITS-PLF-03 Printer Total Cost of Ownership (.pdf)
  Printer TCO Tools
   
  Security Standards — SEC Series
 
  ITS-SEC-01 Data Encryption and Cryptography (.pdf)
   
  Systems Management Standards — SYS Series
   
  ITS-SYS-01 Bar Code Standards for Automated Inventory Systems Used by State of Ohio Government Agencies (.pdf)
   
 
   
OIT Enterprise Procedures
  red line
   
  Security Procedures — SEC Series
   
  OEP-SEC.4001 Statewide Incident Response Reporting                           
   
  OEP-SEC.4002 Review of Sensitive Data Bulletin Exception Request (.pdf)
    Sensitive Data Bulletin Exception Request Form (.doc)
   
 
   
 

State of Ohio IT Bulletins

  red line
   
  ITB-2008.02 Privacy Impact Assessments (.pdf)
  PTA Template (.doc) •  PIA Template (.doc)
   
  ITB-2008.01 Encryption and Investigatory Needs (.pdf)
    Statement of Responsibility (.doc)
   
  ITB-2007.02 Data Encryption and Securing Sensitive Data (.pdf)
   
  ITB-2007.01 Electronic Communication and Public Records (.pdf)
   
  ITB-2006.01 Public Records Requests Concerning IT and Telecommunications Systems (.pdf)
     
 
 

• Enterprise IT Architecture & Policy Home • IT Policy Management 

• IT Standards Management • IT Law  & Policy • Rules, Directives, Policies, Standards, Procedures & Bulletins • Enterprise IT Architecture & Policy News • Electronic Signature Rule 

• IT Policy FAQs • IT Rule FAQs •  Policy Resources • Standards Resources 

• Contact Us