Exceptions to the State of Mississippi Enterprise Security Policies, Standards,

Exceptions to the State of Mississippi Enterprise Security Policies, Standards, Guidelines, and Recommendations A. The only permitted exceptions to the State of Mississippi Enterprise Security Policy are those that are approved in writing by ITS for an agency’s specific purpose and are only applicable to that agency’s operations for the duration of time defined by the exception. B. Each agency must inquire with the agency partner (e.g., subcontractor, vendor, third- party, etc.) and appropriate agency staff to ascertain if design alternatives, configuration changes, or additional products, systems, or services are available to attain compliance prior to submitting a request for an exception. C. Prior to selecting, acquiring, and/or procuring data and information technology resources (i.e., data and information technology systems, services, products, etc.) and/or renewing existing agreements for data and information technology resources, each agency must consider all applicable enterprise policies and standards and is responsible for ensuring the data and information technology resource allows the agency to be in compliance with all applicable enterprise policies and standards when specifying, scoping, evaluating, and/or renewing solutions and that all appropriate cybersecurity requirements are included in the acquisition/procurement of data and information technology solutions.