State Chief Information Officer, State of North Carolina, Gerald L. Fralick, State CIO
Organizational Structure
Statewide Information Security Manual
The Statewide Information Security Manual is the foundation for information technology security in North Carolina executive branch agencies and sets out the minimum security requirements for agencies to follow. The Manual is to be used in conjunction with agency specific policies and those policies found in the appendix.

The State CIO reviews policies and standards on an ongoing basis. The policies and standards found on these pages are the most current versions available.
Table of Contents
Introduction
Chapter 1 – Classifying Information and Data
Chapter 2 - Controlling Access to Information and Systems
Chapter 3 - Processing Information and Documents
Chapter 4 - Purchasing and Maintaining Commercial Software
Chapter 5 - Securing Peripherals and Other Equipment
Chapter 6 - Combating Cyber Crime
Chapter 7 - Controlling E-Commerce Information Security
Chapter 8 - Developing and Maintaining In-House Software
Chapter 9 - Dealing with Premises Related Considerations
Chapter 10 - Addressing Personnel Issues Relating to Security
Chapter 11 - Delivering Training and Staff Awareness
Chapter 12 - Complying with Legal and Policy Requirements
Chapter 13 - Detecting and Responding to IS Incidents
Chapter 14 - Planning for Business Continuity
Appendix
 

Contact Us

Office of Information Technology Services
PO Box 17209, Raleigh, NC 27619-7209
State of North Carolina