Begin Main Content Area

IT Policies

Can't find what you're looking for? Try our policy search engine. 

Third-party vendors, licensors, contractors, or suppliers shall meet the policy requirements of the Commonwealth's Information Technology Policies (ITPs) that are applicable to the products and services provided to the Commonwealth.

Domain Title Supporting Documents Current Version
Access ITP_ACC001- Information Technology Digital Accessibility Policy
01/26/2021
Application ITP_APP030- Active Directory Architecture
10/25/2010
​Business ​ITP_BUS000-Information Technology Policy Governance
​OPD BUS000B
OPD BUS000C
OPD BUS000D
OPD BUS000E
07/23/2021​
Business ​ITP_BUS001-IT Planning and Projects
​OPD_BUS001A
OPD_BUS001A word
02/04/2021
​Business
ITP_BUS002-IT Investment Review Process
​RFD-BUS002B
05/18/2021
Business ITP_BUS004- IT Policy Waiver Review Process
OPD BUS004A
RFD BUS004B
03/20/2020
Business ITP_BUS007- Enterprise Service Catalog
07/19/2018
Business ITP_BUS008- Enterprise Employment Application Platform Policy11/21/2016
​Business ITP_BUS010-Business Process Management Policy​07/03/2017
​Business
ITP_BUS011-IT Service Organization Management and Cloud Requirements
OPD BUS011A
OPD-BUS011B
OPD-BUS011C
​12/01/2020
​Business
ITP_BUS012-Artificial Intelligence General Policy
RFD-BUS012A
RFD-BUS012B
​09/09/2020
​InformationITP_INF000- Enterprise Data and Information Management Policy
OPD INF000A12/22/2020
Information ITP_INF001- Database Management Systems
OPD INF001B 
1/15/2021
Information ITP_INF003- Data Modeling Standards
BPD INF003C 
BPD INF003D 
STD INF003A 
STD INF003B
05/13/2021
Information ITP_INF004- Data Warehouse Policy
BPD INF004B 
GEN INF004A 
GEN INF004D 
STD INF004C
05/14/2021
Information ITP_INF006- Commonwealth Code Standard

05/13/2021
Information
ITP_INF009- e-Discovery Technology Standard STD INF009A11/18/2010
Information ITP_INF010- Business Intelligence Policy
GEN INF010B
STD INF010A
06/04/2021
Information ITP_INF011- Business Intelligence Reporting Policy
GEN INF011B
STD INF011A
06/17/2021
Information ITP_INF012- Business Intelligence Dashboard Policy
GEN INF012B
STD INF012A
06/25/2021
Information ITP_INFRM001- The Life Cycle of Records: General Policy Statement
6/17/2021
Information ITP_INFRM004- Management of Web Records

06/22/2021
Information ITP_INFRM005- System Design Review of Electronic Systems
OPD INFRM005A
06/25/2021
​Information
ITP-INFRM006 - Electronic Document Management Systems
RFD
INFRM006C

STD
INFRM006A

STD
INFRM006B

​07/19/2021
Information ITP_INFRM007- Management of Electronic Information created via Multi-Function Devices or Other non-EDMS Desktop Scanners

06/25/2021
Integration
ITP_INT002- Electronic Commerce Formats and Standards
(Formerly ITP-INT_B1)
STD-INT002A
07/20/2021
Integration ITP_INT_B_2- Electronic Commerce Interface Guidelines
07/27/1999
Integration ITP_INT001- Message-Oriented Middleware
BPD_INT001B
STD_INT001A
07/12/2021
Integration ITP_INT006- Business Engine Rules
STD INT006A
07/19/2021
Network ITP_NET001- Wireless LAN Technology06/10/2016
Network ITP_NET002- Network Router and Switch Technology Standards GEN NET002B
10/31/2018
Network ITP_NET003- Enterprise Telecommunication Services

04/1/2021
Network ITP_NET004- Internet Protocol Address Standards OPD NET004A12/20/2010
Network ITP_NET005- Commonwealth External and Internal Domain Name Services (DNS)

OPD_NET005A

OPD-NET005B

03/17/2020
Network ITP_NET007- Cable/Satellite Television (CATV) Services OPD NET007A12/21/2010
Network ITP_NET008- Telecommunications Services for Commonwealth Business Partners10/09/2015
Network ITP-NET009 RESCINDED: Video Conferencing Services for the Commonwealth of PA

2/09/2021
Network ITP_NET010- Commonwealth of Pennsylvania Satellite Services & Equipment Policy OPD NET010A
OPD NET010B
OPD NET010C
03/03/2011
Network ITP_NET016- Wireless Cellular Data Technology
03/09/2021
Network ITP_NET17_Network Timing Protocol
07/29/2018
Network ITP_NET018- Commonwealth Metropolitan Area Network (MAN) and Internet Access09/13/2019
Network ITP_NET019- Virtual Desktop Infrastructure11/13/2012
​Platform
ITP_PLT002 - Multi-Function Equipment Management Policy
​OPD-PLT002A
11/08/2019​

Platform ITP_PLT005- Server Operating System Policy
01/16/2020
Platform ITP_PLT012- Use of Privately Owned PCs to Access CoPA Resources06/06/2016
Platform ITP_PLT017- Desktop and Laptop Operating System Standards
            02/02/2020
​PlatformITP_PLT018- Commonwealth of PA Centralized E-Mail Policy​07/19/2019
​PlatformITP_PLT019- Web Server/Application Server Standards
​07/01/2017
Privacy
ITP_PRV001- Commonwealth of Pennsylvania Electronic Information Privacy Policy OPD_PRV001A
03/23/2018
Privacy
ITP_PRV002- Electronic Information Privacy Officer
OPD PRV002A11/18/2010
​SecurityITP_SEC000 - Information Security Policy
OPD_SEC000B
05/07/2020
Security
ITP_SEC001- Enterprise Host Security Software Policy

02/09/2021
Security ITP_SEC002- Internet Accessible Reverse-Proxy Servers and Services
06/04/2021
Security ITP_SEC003- Enterprise Content FIltering Standard
07/12/2021
Security ITP_SEC004- Enterprise Web Application Firewall

05/05/2021
Security ITP_SEC005- Commonwealth Application Certification and Accreditation
06/17/2021
Security ITP_SEC006- Commonwealth of Pennsylvania Electronic Signature Policy
RFD-SEC006A
03/23/2021
Security ITP_SEC007- Minimum Standards for IDs, Passwords and Multi-Factor Authentication09/22/2020
Security ITP_SEC008- Enterprise E-mail Encryption

04/7/2021
Security ITP_SEC009- Minimum Contractor Background Checks Policy

07/12/2021
Security ITP_SEC010- Virtual Private Network Standards

07/12/2021
Security ITP_SEC011- Enterprise Policy and Software Standards for Agency Firewalls
05/05/2021
Security ITP_SEC012- Commonwealth of PA System Logon Banner and Screensaver Requirements

07/12/2021
Security ITP_SEC013- RESCINDED - Identity Protection and Access Management (IPAM) Architectural Standard Identity Management Services             08/11/2020
Security ITP_SEC014- RESCINDED - Identity Protection and Access Management (IPAM) Architectural Standard Identity Management Technology Standards             08/11/2020
Security ITP_SEC015- Data Cleansing Policy
OPD SEC015A10/04/2018
Security ITP_SEC016- Commonwealth of Pennsylvania - Information Security Officer Policy03/16/2017
Security ITP_SEC017- CoPA Policy for Credit Card Use for e-Government08/14/2013
Security ITP_SEC019- Policy and Procedures for Protecting Commonwealth Electronic Data            
12/17/2020
Security
ITP-SEC020 RESCINDED - Encryption Standards for Data at Rest
12/4/2020
Security ITP_SEC021- Security Information and Event Management Policy
05/9/2013
Security ITP_SEC023- Information Technology Security Assessment and Testing Policy
05/7/2015
Security ITP_SEC024- IT Security Incident Reporting Policy
07/16/2021
Security ITP_SEC025- Proper Use and Disclosure of Personally Identifiable Information (PII)
01/12/2018
Security ITP_SEC027- Standard for Electronic Postmarks

06/07/2021
Security ITP_SEC029- Physical Security Policy for IT Resources
SEC029 REFERENCE06/08/2021
Security ITP_SEC031- Encryption Standards

06/22/2021
Security ITP_SEC032- Enterprise Data Loss Prevention (DLP) Compliance Standards
04/28/2021
Security
ITP_SEC034- Enterprise Firewall Rule Set
05/10/2021
​Security
​ITP-SEC035 Mobile Device Security Policy
​07/19/2021
​SecurityITP_SEC037- RESCINDED - Identity Proofing of Online Users
12/07/2020
​Security ​ITP_SEC038- COPA Data Center Privileged User Identification and Access Management Policy​06/19/2018
​Security ​ITP-SEC039 Keystone Login and Identity Proofing
​12/07/2020
Software ITP SFT000- Software Development Life Cycle (SDLC) Policy
08/15/2018
SoftwareITP_SFT001 Software Licensing02/22/2017
Software ITP_SFT002 Commonwealth of PA Design Standards
OPD-SFT002A 
04/01/2020
​SoftwareITP_SFT003- Geospatial Enterprise Service Architecture02/22/2017
Software ITP_SFT004 Geospatial Information Systems (GIS)02/22/2017
​SoftwareITP_SFT005- Managed File Transfer (MFT)
02/22/2017
Software ITP_SFT006- Internet Browser Policy
STD-SFT006A
06/04/2021
​SoftwareITP_SFT007- Office Productivity Policy06/14/2019
Software ITP SFT008- Enterprise Resource Planning (ERP) Management02/22/2017
Software ITP SFT009- Application Development04/27/2018
System Management ITP_SYM003- Off-Site Storage for Commonwealth Agencies12/20/2010
System Management ITP_SYM004- Policy for Establishing Alternate Processing Sites for Commonwealth Agencies OPD SYM004A
OPD SYM004B
05/22/2012
System Management ITP_SYM006- Commonwealth IT Resources Patching Policy  OPD SYM006A01/04/2017
System Management ITP_SYM008- Virtualization Policy
12/03/2019
System Management ITP_SYM010- Enterprise Change Management Maintenance Policy OPD SYM010A 12/03/2019