Accessibility

• Information Technology Accessibility Standard (GOV103-00) (11/04/2005)

You can find more Accessibility information on VITA's Accessibility page.

Enterprise Architecture

The Commonwealth’s Enterprise Architecture (EA) contains Business, Information, Solutions, and Technical Architecture components. EA provides the framework for establishing comprehensive requirements for information technology resource management. The Enterprise Technical Architecture (ETA) is comprised of eight technical domains (Applications, Database, Enterprise Systems Management, Information, Integration, Networking and Telecommunications, Platform, and Security). The EA Policy (EA 200) and EA Standard (EA 225) address all of the components of the Commonwealth’s Enterprise Architecture, including the eight ETA technical domains. The EA Standard includes comprehensive requirements and technology standards for each technical domain except Security. Applicable security policies and standards are referenced within the Security Section of the EA Standard.

Reports containing research, reviews, requirements, technology standards, recommended practices and principles related to specific technical domains or technology topics can be found in the EA Library.

• Enterprise Architecture Policy (EA 200-00) (07/20/2006)
  • Appendix B: ETA Change- Exception Request Form (09/10/2009)
• Enterprise Architecture Standard (EA 225-04) (06/19/2009)
  • EA225-04 Standard Preface (06/19/2009)
  • EA225-04 Standard Sec. 2 Application (06/19/2009)
  • EA225-04 Standard Sec. 3 Database (04/01/2009)
  • EA225-04 Standard Sec. 4 Information (07/10/2006)
  • EA225-04 Standard Sec. 5 Integration (10/01/2008)
  • EA225-04 Standard Sec. 6 Network & Telecom (07/01/2009)
  • EA225-04 Standard Sec. 7 Platform (10/29/2007)
  • EA225-04 Standard Sec. 8 Security (04/01/2009)
  • EA225-04 Standard Sec. 9 Entp Sys Mgmt (04/01/2009)
  • EA225-04 Standard Sec. 10 Glossary (07/10/2006)

Geographic Information Systems (GIS)

• Model Virginia Map Accuracy Standards Guideline (ITRM Guideline OTH701-00) (03/15/2009)

Information Security

Information Security Policy

• IT Information Security Policy (SEC 519-00) (07/24/2009) (Word version)
• IT Information Security Policy (SEC500-02) (07/17/2008) (Superseded by SEC519-00)

Information Security Standards

• IT Information Security Standard (SEC501-01) (08/11/2009) (Word version)
• IT Security Audit Standard (SEC502-00) (01/11/2007) (Compliance Date: 02/01/2007) (Word version)
• IT Standard Use of Non-Commonwealth Computing Devices to Telework (SEC511-00) (07/01/2007) (Word version)
• Removal of Commonwealth Data from Surplus Computer Hard Drives and Electronic Media Standard (SEC514-03) (03/15/2008) (Word version)
  • Data Removal information
• Secure Remote Access to Online Court Documents Standard (SEC503-02) (03/28/2005)
• Virginia Real Property Electronic Recording Standard (SEC505-00) (05/01/2007)

Information Security Guidelines

• Information Systems Facilities Security Guideline (SEC517-00) (04/27/09) (Word version)
• IT Contingency Planning Guideline (SEC508-00) (4/18/07) (Word version)
• IT Data Protection Guideline (SEC507-00) (7/02/07) (Word version)
• IT Logical Access Control Guideline (SEC509-00) (4/18/07) (Word version)
• IT Personnel Security Guideline (SEC513-00) (2/15/2008) (Word version)
• IT Risk Management Guideline (SEC506-01) (12/11/2006) (Word version)
  • IT Risk Assessment Instructions- Appendix D (SEC506-01) (12/14/2006) (Word version)
• IT Security Audit Guideline (SEC512-00) (12/20/2007) (Word version)
• IT Security Threat Management Guideline (SEC510-00) (07/01/2007) (Word version)
• IT Systems Asset Management Guideline (SEC518-00) (04/27/09) (Word version)
• IT Systems Security Guideline (SEC515-00) (07/17/2008) (Word version)

Templates for Download

• Corrective Action Plan Template
• Exception Request Form - COV IT Security Policy and Standard
• General Audit Program Example
• Information Security System Security Plan 
• Interoperability Security Agreement Template
• IT Security Audit Plan Template
• IT Security Audit Resources Templates
• Risk Assessment Report Template
• System Inventory and Definition Template
• Security Roles and Responsibilities Template
• VDEM BIA Template 

See also non-ITRM Information Security Policies, Standards, and Guidelines (including Security Templates for download).

Project Management

• Commonwealth Project Management Guideline (CPM 110-02) (01/23/2006)
• Project Management Standard (CPM 112-02) (10/26/2007)
• Project Manager Selection and Training Standard (CPM 111-01) (07/14/2009)

Technology Management

• Technology Management Policy (GOV 2002-02.1) (03/03/2004)
• Information Technology Investment Management (ITIM) Standard (CPM 516-00) (09/30/2008)
• Technology Management Glossary Standard (GOV 2003-02.3) (02/22/2008)
• Governance Document Development Process Standard (GOV101-01) (12/08/2004)
• Information Technology Resource Management Policy (GOV102-01) (07/24/2009)

See also non-ITRM Policies, Standards, and Guidelines.