Purpose

Purpose The goal of this policy is to improve the cybersecurity posture of the State by establishing requirements for preserving the confidentiality, integrity, and availability of State of Mississippi information and information technology (IT) systems (hereafter referred to collectively as “SOM Assets”) from unauthorized use, access, disclosure, modification, or destruction. Confidentiality ensures that information is accessible only to those authorized to have access. Integrity ensures the accuracy and completeness of the data is safeguarded. Availability ensures that authorized users have access to the information. This policy establishes minimum security requirements that all agencies will adhere to, using them as minimum standards with which to develop, implement, and maintain their individual agency IT security policies, plans, and procedures as well as the standards and policies for all state data and information technology resources that state agencies shall implement to the extent that they apply including defined enterprise security minimum requirements for procuring data and information technology systems and services.