DHHS Directive Number II-12
|
|
|
- Beverly Garrett
- 9 years ago
- Views:
Transcription
1 DHHS Directive Number II-12 Title: Delegation of Authority to the Director, Division of Information Resource Management Effective Date: November 3, 2008 Revision History: January 1, 2002 Authority: G.S. 143B-10 Session Law , Section 10.8A Session Law , Section 10.2C Purpose The purpose of this directive is to delegate, clarify and specifically confirm certain authorities of the secretary of the North Carolina Department of Health and Human Services (NC DHHS) to the director of the Division of Information Resource Management (DIRM). The director of DIRM shall serve as the Chief Information Officer for DHHS. This position shall report to the secretary through the Deputy Secretary for the department. The DIRM supports the business functions of the DHHS by providing the department and its divisions and offices with both information resource management (IRM) policy and planning services, and information technology (IT) services. Both information resource management and information technology services shall be in partnership with the DHHS divisions/offices. DIRM shall continuously strive to enhance the department s maximization of enterprise IT solutions and efficiencies. These enterprise solutions further develop and implement IT consolidation by coordinating efforts, avoiding duplications and producing accountability for the IT resources. IRM policy and planning services shall include, but not be limited to, assistance in: (1) policy research, analysis, and development; (2) policy compliance monitoring; (3) short term and long term planning; (4) quality assurance; (5) system-wide security and privacy protection against both deliberate and accidental intrusions and disasters; (6) IT business continuity and disaster recovery planning and implementation; (7) IT project management; (8) compliance with S.L (Senate Bill 991) requirements; (9) IT procurement and (10) HIPAA coordination.. IT services shall include, but not be limited to, assistance in: (1) computer application systems software planning, development, transfer, maintenance and modification; (2)
2 Page 2 of 6 telecommunications and network design and management support; (3) computer hardware planning and installation support; (4) technical assistance and consultation in all areas related to the acquisition and installation of computer hardware and software and (5) IT security. The DIRM shall work with departmental and divisional management to help ensure the availability and integrity of high quality automated information systems for the department and its constituent divisions and offices. The DIRM shall provide continuous review of all IT projects proposed and/or initiated throughout the department and departmental divisions, shall maintain a complete inventory of all such technology projects including ongoing project status, and shall assist in the coordination of those projects having planned or potential departmentwide or multi-divisional applications. As the DHHS Chief Information Officer (CIO), the director of DIRM shall have the authority and responsibility for approving all projects that meet S.L (Senate Bill 991) requirements. The DIRM shall serve as the primary liaison to the State CIO s Office, more specifically the State s Enterprise Project Management Office (EPMO) in relation to projects subject to S.L (Senate Bill 991). The DIRM shall oversee and coordinate the establishment and on going operations of a privacy and security program for the department s information resources, including policies, procedures, standards to protect the availability and integrity of hardware, software, telecommunication network, applications and IT business continuity. The purpose of this directive is to enable the DIRM to fulfill its function to consult, coordinate and advise the department and its divisions through the delegation of certain authority by the Secretary of the DHHS to the director of the DIRM. Delegation of Authority Nothing in this delegation of authority is intended to supercede the delegated authority of the deputy secretary, assistant secretaries or senior advisor to review and approve any automation plan, including related budgeted cost, submitted by DIRM to either the department, its divisions, or on behalf of local agencies. As provided in G.S. 143B-10(a), the secretary of the DHHS delegates the following functions and responsibilities concerning management and administration to the director of the DIRM, subject to state and departmental policy: 1. The functions of management, related to the DIRM, as defined in G.S. 143B-10, which include: planning, organizing, staffing, directing, coordinating, evaluating, reporting and budgeting. 2. Shall research and provide the ongoing review, of all existing federal, state, and departmental IRM and IT policies, procedures and standards. Such research and review shall be conducted for the purpose of making recommendations to the secretary, the deputy secretary, the assistant secretaries or the senior advisor, for the revision of existing departmental information technology policies, and/or the development and adoption of new policies, in areas related to the role of automation, the scope of automation, the objectives of automation, and/or the acquisition, allocation, management, and security of automation resources. The director of DIRM shall review
3 Page 3 of 6 any policy modifications proposed by departmental division management and make recommendations to the secretary, the deputy secretary, the assistant secretaries or the senior advisor, with respect to such proposals. 3. Shall verify compliance with all federal, state, and departmental IRM policies. The director of DIRM shall monitor the implementation of all federal, state and departmental IRM policies by the department and its divisions and offices. Appropriate departmental or divisional management shall be notified of any failure to comply with established policies, and the director shall work with management to implement corrective action. Should such corrective action not be established, the director shall notify the secretary, the deputy secretary, the appropriate assistant secretary or the senior advisor. 4. In coordination with the secretary, the deputy secretary, the appropriate assistant secretary or the senior advisor the director of DIRM shall serve as the department s principle advocate and liaison on matters of IRM policy with federal, state and local agencies. The director shall serve as a principle advisor to the department s executive management team on all IRM issues, and provide appropriate consultation and guidance to all divisions and offices within the department to ensure compliance with established policies. 5. The director of DIRM shall assist in and coordinate the development of short and long range strategic IRM and IT plans for the department and departmental divisions. These plans shall meet the requirements established by applicable legislation, the Office of the State CIO and the Office of Information Technology Services (ITS). In coordination and consultation with the secretary, the deputy secretary, the appropriate assistant secretary or the senior advisor the director may establish additional requirements for such IRM and IT plans, and shall monitor the implementation of such plans. The requirements for IRM plans shall address the management of the department s and departmental divisions data as an organizational resource and provide for (1) compatible databases; (2) consistent field definitions to the maximum extent possible; (3) coordinated usage of common data throughout the department; (4) adherence to statewide and DHHS architecture standards; (5) adoption of statewide and DHHS security requirements and (5) maintenance and on-going IT operations. The requirements shall include the determination of both anticipated development and maintenance costs related to proposed projects, and anticipated funding sources. 6. Shall review, approve, or deny all federal Planning Advance Planning Documents (PAPD s), Implementation Advance Planning Documents (including APD updates), all requests for proposals (RFP s) and other IT procurement documents for systems originated by the department or any departmental divisions or offices. The DIRM review shall be performed in coordination and consultation with the department s Office of the Controller, the Office of Procurement and Contracting Services and the Division of Budget and Analysis. After proper review and consultation, the director shall make recommendations to the secretary, the deputy secretary, the appropriate assistant secretary or the senior advisor regarding approval. DIRM shall then monitor the
4 Page 4 of 6 implementation of all such approved documents to verify compliance with all document provisions and established requirements. 7. Shall provide technical consultation and guidance to all departmental divisions and offices on IRM planning and IRM policy development. DIRM shall provide assistance and coordination in the development of concepts, goals and objectives of all computer systems, on automation resource acquisition and management, on grant proposals for automation services, and on training for automation planning and management issues. 8. Shall research existing federal, state and departmental IRM policies and propose modifications or additions to those policies in order to establish necessary requirements for, coordinate the development of, and monitor the implementation of the department s data and information resource security and disaster recovery programs by the department and its divisions and offices. 9. Shall review, approve or deny all requests for automation projects that involve the acquisition of custom developed software, and the customization of off-the-shelf software that include federal financial participation made by local governmental agencies such as county DSS offices, public health departments or local management entities. This review shall ensure that, per federal requirements, all human service automation projects are statewide in scope and operation. DIRM shall work with the respective DHHS divisions or offices and representatives of the affected local agencies to establish the process for the review and approval of requests. 10. Shall review and approve the acquisition of all information technology resources (e.g., computer hardware, software, consulting services, etc.) proposed by all departmental divisions and offices, regardless of funding source. The review shall include, but not be limited to, a determination of whether or not the IRM resources proposed to be acquired meet the requirements that have been specified by the purchasing division or agency. The director s approval or disapproval shall be consistent with applicable federal, state, or departmental policies, standards, and guidelines. The director shall promptly communicate any concerns, problems, or difficulties DIRM may determine in its review to the appropriate departmental division director in an effort to seek possible solution. Should a solution not be established, the director shall notify the secretary, the appropriate assistant secretary, or the senior advisor. 11. Shall monitor and ensure that departmental system designs and applications are consistent with the ITS, the Office of the State CIO and DHHS IT policies, procedures, standards and requirements. DIRM shall ensure that project management methodology and consistent technical standards are developed, maintained, and followed in the design and implementation phases. DIRM shall use the S.L (Senate Bill 991) reporting requirements and the DHHS IT policies and procedures in approving or denying IT projects and operations. This review process must also take into consideration the maintenance and ongoing operational costs of the system or change.
5 Page 5 of Shall serve as the department s principle liaison with ITS. DHHS divisions/offices shall be involved in the communication with ITS to ensure that the business needs of the respective divisions are represented. As the principle liaison, DIRM shall establish mechanisms to gather from and distribute to DHHS divisions and offices information to achieve effective and efficient departmental IT operations and support. 13. In partnership with DHHS divisions and offices, DIRM shall provide consultation, technical assistance and oversight for HIPAA (Health Insurance Portability and Accountability Act) implementation and oversight. DIRM shall designate a DHHS Privacy Officer and DHHS Security Officer. 14. Shall consult with and keep the secretary, the deputy secretary, the appropriate assistant secretary or the senior advisor informed on all priority issues related to the impact of new technology, the delivery of automation services, and the operation of automated systems within the department. DIRM shall serve as a principal voting member on the DHHS Information Technology Governance Committee (ITGC) and shall provide staff support to the ITGC. 15. Shall implement a process to receive, review and approve/deny waivers to adherence to DHHS IT policies, procedures, standards and requirements. The process shall be a DHHS policy. 16. Shall provide a clearinghouse for used departmental hardware and software assets to determine if the assets have any departmental use before surplusing. DIRM shall develop procedures for the DHHS divisions and offices to follow when surplusing or disposing of hardware or software to ensure DIRM s inspection of potential surplused assets. 17. Shall be responsible for the development, coordination and maintenance of an automated or physical inventory of all DHHS IT assets. This inventory is intended to supplement and not replace the DHHS Controller s Office Fixed Asset responsibilities. DHHS divisions and offices shall provide assistance and cooperation to DIRM as requested to develop and maintain this IT inventory. 18. The director shall be responsible for ensuring that the division is familiar with and adheres to the department s policy and procedures manual. This delegation of authority shall not deprive the secretary from performing, in lieu of the director of the DIRM, any of the acts set forth above. This delegation of authority may be amended or withdrawn by the secretary at any time and without notice. This delegation of authority shall not apply to any action, which by law, state policy, or NC Governor s Executive Order, may only be executed by the secretary. APPROVED
6 Page 6 of 6 Dempsey Benton, Secretary Department of Health and Human Services
U.S. Department of Education. Office of the Chief Information Officer
U.S. Department of Education Office of the Chief Information Officer Investment Review Board (IRB) CHARTER January 23, 2013 I. ESTABLISHMENT The Investment Review Board (IRB) is the highest level IT investment
RRC STAFF OPINION PERIODIC REVIEW AND EXPIRATION OF EXISTING RULES REPORT
RRC STAFF OPINION PERIODIC REVIEW AND EXPIRATION OF EXISTING RULES REPORT PLEASE NOTE: THIS COMMUNICATION IS EITHER 1) ONLY THE RECOMMENDATION OF AN RRC STAFF ATTORNEY AS TO ACTION THAT THE ATTORNEY BELIEVES
G.S. 143B-426.38A Page 1
143B-426.38A. Government Data Analytics Center; State data-sharing requirements. (a) State Government Data Analytics. The State shall initiate across State agencies, departments, and institutions a data
UNITED STATES DEPARTMENT OF THE INTERIOR BUREAU OF LAND MANAGEMENT MANUAL TRANSMITTAL SHEET. 1283 Data Administration and Management (Public)
Form 1221-2 (June 1969) Subject UNITED STATES DEPARTMENT OF THE INTERIOR BUREAU OF LAND MANAGEMENT MANUAL TRANSMITTAL SHEET 1283 Data Administration and Management (Public) Release 1-1742 Date 7/10/2012
NC General Statutes - Chapter 147 Article 3D 1
Article 3D. State Information Technology Services. Part 1. State Information Technology Management. 147-33.72A. Purpose. The purposes of this Article are to: (1) Establish a systematic process for planning
TITLE III INFORMATION SECURITY
H. R. 2458 48 (1) maximize the degree to which unclassified geographic information from various sources can be made electronically compatible and accessible; and (2) promote the development of interoperable
Software Licenses Managing the Asset and Related Risks
AUDITOR GENERAL S REPORT ACTION REQUIRED Software Licenses Managing the Asset and Related Risks Date: February 4, 2015 To: From: Wards: Audit Committee Auditor General All Reference Number: SUMMARY The
TABLE OF CONTENTS. 2006.1259 Information Systems Security Handbook. 7 2006.1260 Information Systems Security program elements. 7
PART 2006 - MANAGEMENT Subpart Z - Information Systems Security TABLE OF CONTENTS Sec. 2006.1251 Purpose. 2006.1252 Policy. 2006.1253 Definitions. 2006.1254 Authority. (a) National. (b) Departmental. 2006.1255
Information Technology Governance Overview and Charter
Information Technology Governance Overview and Charter Prepared by: Project #: Date submitted Document version: IT Governance Charter v03.05.2012 1.0 48.0 - Page 1 of 34 Document History Version Date Author
CLASS FAMILY: Business Operations and Administrative Management
OCCUPATIONAL GROUP: Business Administration CLASS FAMILY: Business Operations and Administrative Management CLASS FAMILY DESCRIPTION: This family of positions includes those which perform administrative
Department of Defense DIRECTIVE
Department of Defense DIRECTIVE NUMBER 5144.02 November 21, 2014 DCMO SUBJECT: DoD Chief Information Officer (DoD CIO) References: See Enclosure 1. PURPOSE. Under the authority vested in the Secretary
UNITED STATES DEPARTMENT OF THE INTERIOR BUREAU OF LAND MANAGEMENT MANUAL TRANSMITTAL SHEET
Form 1221-2 (June 1969) UNITED STATES DEPARTMENT OF THE INTERIOR BUREAU OF LAND MANAGEMENT Release: 1-1718 Date: MANUAL TRANSMITTAL SHEET Subject 1265 Information Technology Investment Management (ITIM)
IT SECURITY EDUCATION AWARENESS TRAINING POLICY OCIO-6009-09 TABLE OF CONTENTS
OFFICE OF THE CHIEF INFORMATION OFFICER Date of Issuance: May 22, 2009 Effective Date: May 22, 2009 Review Date: Section I. PURPOSE II. AUTHORITY III. SCOPE IV. DEFINITIONS V. POLICY VI. RESPONSIBILITIES
U.S. Department of Energy Washington, D.C.
U.S. Department of Energy Washington, D.C. ORDER DOE O 200.1A Approved: SUBJECT: INFORMATION TECHNOLOGY MANAGEMENT 1. OBJECTIVES. The Department of Energy s (DOE) overarching mission, to advance the national,
APHIS INTERNET USE AND SECURITY POLICY
United States Department of Agriculture Marketing and Regulatory Programs Animal and Plant Health Inspection Service Directive APHIS 3140.3 5/26/2000 APHIS INTERNET USE AND SECURITY POLICY 1. PURPOSE This
Information Security Policy and Handbook Overview. ITSS Information Security June 2015
Information Security Policy and Handbook Overview ITSS Information Security June 2015 Information Security Policy Control Hierarchy System and Campus Information Security Policies UNT System Information
I. Purpose - 1 MD # 0005
Department of Homeland SecUl ity Management Directives System MD Number: 0005 Issue Date: 10/28/2004 FINANCIAL MANAGEMENT LINE OF BUSINESS INTEGRATION AND MANAGEMENT I. Purpose This Management Directive
State of Minnesota IT Governance Framework
State of Minnesota IT Governance Framework June 2012 Table of Contents Table of Contents... 2 Introduction... 4 IT Governance Overview... 4 Process for Developing the New Framework... 4 Management of the
STATEMENT OF CHARLES EDWARDS DEPUTY INSPECTOR GENERAL U.S. DEPARTMENT OF HOMELAND SECURITY BEFORE THE
STATEMENT OF CHARLES EDWARDS DEPUTY INSPECTOR GENERAL U.S. DEPARTMENT OF HOMELAND SECURITY BEFORE THE COMMITTEE ON HOMELAND SECURITY SUBCOMMITTEE ON OVERSIGHT AND MANAGEMENT EFFICIENCY U.S. HOUSE OF REPRESENTATIVES
Audit of Veterans Health Administration Blood Bank Modernization Project
Department of Veterans Affairs Office of Inspector General Audit of Veterans Health Administration Blood Bank Modernization Project Report No. 06-03424-70 February 8, 2008 VA Office of Inspector General
STATE OF HAWAII CHIEF INFORMATION OFFICER AND THE OFFICE OF INFORMATION MANAGEMENT AND TECHNOLOGY UPDATE ON THE INFORMATION TECHNOLOGY STRATEGIC PLAN
STATE OF HAWAII CHIEF INFORMATION OFFICER AND OFFICE OF INFORMATION MANAGEMENT AND TECHNOLOGY REPORT ON UPDATE ON THE INFORMATION TECHNOLOGY STRATEGIC PLAN DECEMBER 2011 SUBMITTED TO THE TWENTY-SIXTH STATE
Information Resources Security Guidelines
Information Resources Security Guidelines 1. General These guidelines, under the authority of South Texas College Policy #4712- Information Resources Security, set forth the framework for a comprehensive
Department of Defense INSTRUCTION
Department of Defense INSTRUCTION NUMBER 8523.01 April 22, 2008 ASD(NII)/DoD CIO SUBJECT: Communications Security (COMSEC) References: (a) DoD Directive C-5200.5, Communications Security (COMSEC) (U),
ClOP CHAPTER 1351.39. Departmental Information Technology Governance Policy TABLE OF CONTENTS. Section 39.1
ClOP CHAPTER 1351.39 Departmental Information Technology Governance Policy TABLE OF CONTENTS Section 39.1 Purpose... 1 Section 39.2 Section 39.3 Section 39.4 Section 39.5 Section 39.6 Section 39.7 Section
Enterprise Resource Planning Presentation to the Joint Legislative Oversight Committee on Information Technology.
Enterprise Resource Planning Presentation to the Joint Legislative Oversight Committee on Information Technology December 18, 2014 Enterprise Resource Planning (ERP) definition ERP is a business system
Technical Competency Framework for Information Management (IM)
Technical Competency Framework for Information Management (IM) Office of the Chief Information Officer (OCIO) June 15, 2009 Table of contents IM Competency Framework...1 Competency 1: Information Management
HHS OCIO Policy for Information Technology (IT) Enterprise Performance Life Cycle (EPLC)
Office of the Chief Information Officer Office of the Assistant Secretary for Resources and Technology Department of Health and Human Services HHS OCIO Policy for Information Technology (IT) Enterprise
COMMAND, CONTROL, COMMUNICATIONS, COMPUTERS AND INFORMATION TECHNOLOGY (C4&IT) INFRASTRUCTURE MANAGEMENT POLICY
Commandant United States Coast Guard 2100 Second Street, S.W. Washington, DC 20593-0001 Staff Symbol: CG-6 Phone: (202) 267-2767 Fax: (202) 267-2598 COMDTINST 5230.70 FEB 11 2005 COMMANDANT INSTRUCTION
Significant Revisions to OMB Circular A-127. Section Revision to A-127 Purpose of Revision Section 1. Purpose
Significant Revisions to OMB Circular A-127 Section Revision to A-127 Purpose of Revision Section 1. Purpose Section 5. Definitions Section 6. Policy Section 7. Service Provider Requirements Section 8.
Establishing A Multi-Factor Authentication Solution. Report to the Joint Legislative Oversight Committee on Information Technology
Establishing A Multi-Factor Authentication Solution Report to the Joint Legislative Oversight Committee on Information Technology Keith Werner State Chief Information Officer Department of Information
CITRIX SYSTEMS, INC. CORPORATE GOVERNANCE GUIDELINES
CITRIX SYSTEMS, INC. CORPORATE GOVERNANCE GUIDELINES Set forth below are Citrix Systems, Inc. s corporate governance policies. These guidelines are subject to change from time to time at the direction
FISH AND WILDLIFE SERVICE INFORMATION RESOURCES MANAGEMENT. Chapter 7 Information Technology (IT) Security Program 270 FW 7 TABLE OF CONTENTS
TABLE OF CONTENTS General Topics Purpose and Authorities Roles and Responsibilities Policy and Program Waiver Process Contact Abbreviated Sections/Questions 7.1 What is the purpose of this chapter? 7.2
NC General Statutes - Chapter 90 Article 29A 1
Article 29A. North Carolina Health Information Exchange Act. 90-413.1. Title. This act shall be known and may be cited as the "North Carolina Health Information Exchange Act." (2011-337, s. 1.) 90-413.2.
PBGC Information Security Policy
PBGC Information Security Policy 1. Purpose. The Pension Benefit Guaranty Corporation (PBGC) Information Security Policy (ISP) defines the security and protection of PBGC information resources. 2. Reference.
Telecommunications Systems Manager I (Supervisor) Essential Task Rating Results
Telecommunications Systems Manager I (Supervisor) Essential Task Rating Results 1 2 3 4 5 6 7 8 9 10 11 12 13 Supervise activities and direct personnel in the implementation of various departmental programs
How To Manage Information Security At A University
Data Management & Protection: Roles & Responsibilities Document Version: 1.0 Effective Date: December, 2008 Original Issue Date: December, 2008 Most Recent Revision Date: November 29, 2011 Approval Authority:
TITLE I GENERAL PROVISIONS
Public Law 101-576 November 15, 1990 Chief Financial Officers Act of 1990 One Hundred First Congress of the United States of America AT THE SECOND SESSION Begun and held at the City of Washington on Tuesday,
DEPARTMENTAL DIRECTIVE
ADMINISTRATIVE COMMUNICATIONS SYSTEM U.S. DEPARTMENT OF EDUCATION DEPARTMENTAL DIRECTIVE OM:5-101 Page 1 of 17 (07/16/2010) Distribution: All Department of Education employees Approved by: /s/ Winona H.
Information Security Program Management Standard
State of California California Information Security Office Information Security Program Management Standard SIMM 5305-A September 2013 REVISION HISTORY REVISION DATE OF RELEASE OWNER SUMMARY OF CHANGES
Reviews to Determine Architectural Compliance of Information Technology Acquisitions Need to Be Consistently Performed and Documented.
Reviews to Determine Architectural Compliance of Information Technology Acquisitions Need to Be Consistently Performed and Documented November 2003 Reference Number: 2004-20-017 This report has cleared
ASSETS: TRACKING, INVENTORY, AND DISPOSAL OF ASSETS, AND ACQUISITION OF REAL PROPERTY
: TRACKING, INVENTORY, AND DISPOSAL OF, AND ACQUISITION OF REAL PROPERTY As Adopted: March 31, 2008 Amended: March 24, 2010 The Monroe County Airport Authority (Authority) constitutes a public benefit
North Carolina Government Data Analytics Center
North Carolina Government Data Analytics Center Report to the Chairs of the House of Representatives Appropriations Committee Chairs of the Senate Based Budget/Appropriations Committee Joint Legislative
Name of Other Party: Address of Other Party: Effective Date: Reference Number as applicable:
PLEASE NOTE: THIS DOCUMENT IS SUBMITTED AS A SAMPLE, FOR INFORMATIONAL PURPOSES ONLY TO ABC ORGANIZATION. HIPAA SOLUTIONS LC IS NOT ENGAGED IN THE PRACTICE OF LAW IN ANY STATE, JURISDICTION, OR VENUE OF
BPA Policy 434-1 Cyber Security Program
B O N N E V I L L E P O W E R A D M I N I S T R A T I O N BPA Policy Table of Contents.1 Purpose & Background...2.2 Policy Owner... 2.3 Applicability... 2.4 Terms & Definitions... 2.5 Policy... 5.6 Policy
Innovation and Technology Department
PERFORMANCE AUDIT Innovation and Technology Department IT Inventory Asset Management January 11, 2016 Office of the City Manager Internal Audit Division Cheryl Johannes, Internal Audit Manager PERFORMANCE
Utica College. Information Security Plan
Utica College Information Security Plan Author: James Farr (Information Security Officer) Version: 1.0 November 1 2012 Contents Introduction... 3 Scope... 3 Information Security Organization... 4 Roles
Information Security Program
Stephen F. Austin State University Information Security Program Revised: September 2014 2014 Table of Contents Overview... 1 Introduction... 1 Purpose... 1 Authority... 2 Scope... 2 Information Security
How To Write A Contract For Software Quality Assurance
U.S. Department of Energy Washington, D.C. NOTICE DOE N 203.1 Approved: Expires: 06-02-01 SUBJECT: SOFTWARE QUALITY ASSURANCE 1. OBJECTIVES. To define requirements and responsibilities for software quality
CITY OF HOUSTON. Executive Order. Information Technology (IT) Governance
CITY OF HOUSTON Executive Order E.O. No: 1-44 Effective Date: December 20, 2012 1. AUTHORITY 1.1 Article VI, Section 7a, of the City Charter of the City of Houston. 2. PURPOSE 2.1 The City of Houston seeks
Department of Defense DIRECTIVE. SUBJECT: Management of the Department of Defense Information Enterprise
Department of Defense DIRECTIVE SUBJECT: Management of the Department of Defense Information Enterprise References: See Enclosure 1 NUMBER 8000.01 February 10, 2009 ASD(NII)/DoD CIO 1. PURPOSE. This Directive:
FSIS DIRECTIVE 1306.3
UNITED STATES DEPARTMENT OF AGRICULTURE FOOD SAFETY AND INSPECTION SERVICE WASHINGTON, DC FSIS DIRECTIVE 1306.3 REVISION 1 12/13/12 CONFIGURATION MANAGEMENT (CM) OF SECURITY CONTROLS FOR INFORMATION SYSTEMS
OCC 98-3 OCC BULLETIN
To: Chief Executive Officers and Chief Information Officers of all National Banks, General Managers of Federal Branches and Agencies, Deputy Comptrollers, Department and Division Heads, and Examining Personnel
Public Procurement Position Descriptions
Public Procurement Position Descriptions The following position descriptions for public procurement are an excerpt of the August 2013 NCPPC study, Identifying Position Domains in Public Sector Procurement:
Five-Year Strategic Plan
U.S. Department of Education Office of Inspector General Five-Year Strategic Plan Fiscal Years 2014 2018 Promoting the efficiency, effectiveness, and integrity of the Department s programs and operations
Department of Defense INSTRUCTION
Department of Defense INSTRUCTION NUMBER 8440.01 December 24, 2015 DoD CIO SUBJECT: DoD Information Technology (IT) Service Management (ITSM) References: See Enclosure 1 1. PURPOSE. Pursuant to the authority
BEFORE THE BOARD OF COUNTY COMMISSIONERS FOR MULTNOMAH COUNTY, OREGON RESOLUTION NO. 05-050
BEFORE THE BOARD OF COUNTY COMMISSIONERS FOR MULTNOMAH COUNTY, OREGON RESOLUTION NO. 05-050 Adopting Multnomah County HIPAA Security Policies and Directing the Appointment of Information System Security
DOD BUSINESS SYSTEMS MODERNIZATION. Additional Action Needed to Achieve Intended Outcomes
United States Government Accountability Office Report to Congressional Committees July 2015 DOD BUSINESS SYSTEMS MODERNIZATION Additional Action Needed to Achieve Intended Outcomes GAO-15-627 July 2015
Management and Use of Information & Information Technology (I&IT) Directive. Management Board of Cabinet
Management and Use of Information & Information Technology (I&IT) Directive Management Board of Cabinet February 28, 2014 TABLE OF CONTENTS PURPOSE... 1 APPLICATION AND SCOPE... 1 PRINCIPLES... 1 ENABLE
MaxMD 2200 Fletcher Ave. 5 th Floor Fort Lee, NJ (201) 963 0005 www.max.md www.mdemail.md [email protected] Page 1of 10
Business Associate Agreement This Business Associate Agreement (the Agreement ) shall apply to the extent that the MaxMD Customer signee is a Covered Entity or "HIPAA Business Associate," as defined below.
Professional Level Public Health Informatician
Professional Level Public Health Informatician Sample Position Description and Sample Career Ladder April 2014 Acknowledgements Public Health Informatics Institute (PHII) wishes to thank the Association
United States Department of Health & Human Services Enterprise Architecture Program Management Office. HHS Enterprise Architecture Governance Plan
United States Department of Health & Human Services Enterprise Architecture Program Management Office HHS Enterprise Architecture Governance Plan Version 3.0 February 2007 Approvals The Health and Human
Department of Defense DIRECTIVE
Department of Defense DIRECTIVE NUMBER 5205.16 September 30, 2014 USD(I) SUBJECT: The DoD Insider Threat Program References: See Enclosure 1 1. PURPOSE. In accordance with sections 113 and 131 through
National Park Service, Interior 61.2
National Park Service, Interior 61.2 The Keeper shall notify the petitioner and the applicable State Historic Preservation Officer, Federal Preservation Officer, or person or local government where there
Guide for the Role and Responsibilities of an Information Security Officer Within State Government
Guide for the Role and Responsibilities of an Information Security Officer Within State Government Table of Contents Introduction 3 The ISO in State Government 4 Successful ISOs Necessary Skills and Abilities
AGENCY FOR HEALTH CARE ADMINISTRATION STATEMENT OF AGENCY ORGANIZATION AND OPERATION
AGENCY FOR HEALTH CARE ADMINISTRATION STATEMENT OF AGENCY ORGANIZATION AND OPERATION GENERAL DESCRIPTION The Agency for Health Care Administration is authorized in Section 20.42, Florida Statutes. It is
Department of Defense INSTRUCTION
Department of Defense INSTRUCTION NUMBER 7750.07 October 10, 2014 DoD CIO SUBJECT: DoD Forms Management Program References: See Enclosure 1 1. PURPOSE. This instruction: a. Reissues DoD Instruction (DoDI)
DTCC RISK COMMITTEE CHARTER
DTCC RISK COMMITTEE CHARTER Purpose The ability to identify, manage and mitigate risk is fundamental to the services that The Depository Trust & Clearing Corporation ( DTCC ) provides to its members and
U.S. Department of Education Federal Student Aid
U.S. Department of Education Federal Student Aid Lifecycle Management Methodology Stage Gate Review Process Description Version 1.3 06/30/2015 Final DOCUMENT NUMBER: FSA_TOQA_PROC_STGRW.NA_001 Lifecycle
Federal Home Loan Bank Membership Version 1.0 March 2013
Introduction The Federal Home Loan Banks (FHLBanks) are cooperative institutions owned by members. The Federal Home Loan Bank Act of 1932 (FHLBank Act) created the Federal Home Loan Bank System to support
HIPAA BUSINESS ASSOCIATE AGREEMENT
HIPAA BUSINESS ASSOCIATE AGREEMENT This HIPAA Business Associate Agreement ("BA AGREEMENT") supplements and is made a part of any and all agreements entered into by and between The Regents of the University
DIRECTIVE TRANSMITTAL
U.S. NUCLEAR REGULATORY COMMISSION DIRECTIVE TRANSMITTAL TN: DT-07-08 To: Subject: Purpose: Office and Division of Origin: NRC Management Directives Custodians Transmittal of Management Directive 2.8,
1. ACF Log No: ACF-OA-PI- 2. Issuance Date: June 11, 2013 PROGRAM INSTRUCTION
ACF Administration for Children and Families CMS Centers for Medicare and Medicaid Services U.S. DEPARTMENT OF HEALTH AND HUMAN SERVICES Administration for Children and Families 1. ACF Log No: ACF-OA-PI-
INFORMATION TECHNOLOGY PROJECT REQUESTS
INFORMATION TECHNOLOGY PROJECT REQUESTS Guidelines & Instructions for Maryland State Agencies Revised Two Step PPR/PIR Approval Process Fiscal Year 2013 Table of Contents Part 1: Overview... 2 1.1 Introduction...
Office of Audits and Evaluations Report No. AUD-13-007. The FDIC s Controls over Business Unit- Led Application Development Activities
Office of Audits and Evaluations Report No. AUD-13-007 The FDIC s Controls over Business Unit- Led Application Development Activities September 2013 Executive Summary The FDIC s Controls over Business