Enterprise Policy, Standards & Architecture
The Official Code of Georgia Annotated, O.C.G.A. §50-25-04(a)(10), vests GTA with authority to “set technology policy for all agencies except those under the authority, direction or control of the General Assembly or statewide elected officials other than the Governor.” The GTA Board of Directors has implemented technology policies pursuant to state statute through the policy on Information Technology Policies, Standards and Guidelines, PM-04-001.03.
The Official Code of Georgia Annotated, O.C.G.A. §50-25-4(a)(21), related to security policies, standards and guidelines is broader than the general statutory authority granted GTA with respect to technology policies. It authorizes GTA to establish statewide security policies and standards that are binding on all agencies. The GTA Board of Directors has implemented security policies pursuant to state statute through the Enterprise Information Security Charter, PS-08-005.01.
Policies, standards and guidelines have a nine-character code following the name.
Example: Name, XX – 08 – 003 . 03
First X = P, S or G (Policy, Standard or Guideline)
Second X = M, A, O or S (Management, Application Development, Operations or Security)
08 = Last two digits of the fiscal year in which created
003 = Serial number of item during the fiscal year in which created
03 = Version number
PM-07-003.03 would be the third version of the PM-07-003 policy, which is in the area of Management. It was the third policy developed in FY 2007. Read the coding as follows: Policy, Management, FY 2007, serial number 3, version 3.
How do policies, standards and guidelines differ?
Policy – A high-level statement of a direction, purpose, principle, method or procedure for managing technology and technology resources.
Standard – A prescribed specification, approach, directive, procedure, solution, methodology, product or protocol that must be followed.
Guideline – Similar to a standard or policy because it outlines a specific principle, direction, directive, specification and procedure, but it is not binding. A guideline is a recommended course of action.
Policies, standards and guidelines are organized in the following categories.