Procedures and standards updates

Procedures/Standards Updates are issued by the California Department of Technology to convey information/guidelines regarding state IT policies. If you have questions about any of these Procedures/Standards Updates, please call the contact person noted in the Procedures/Standards Update.

Number	Announcement	Issued	Status
PS-028	SIMM 5335-A – Security Event Notification and Response Standard Update	6/6/2023	Active
PS-027	SIMM 19A.5 Agency/State Entity Portfolio Report Update	5/26/23	Active
PS-026	SIMM 25 – Information Technology Web Accessibility Update	4/24/23	Active
PS-025	Americans with Disabilities Act (ADA) SIMM 19E Project Delegation Request	3/30/23	Active
PS-024	Information Security General SIMM Maintenance (5300-C, 5310-A, and 5310-C)	10/18/22	Active
PS-023	Information Security General SIMM Maintenance (5305-A, 5330-E, and 5360-A)	8/18/22	Active
PS-022	SIMM 5310-C: Privacy Threshold Assessment and Privacy Impact Assessment UPDATES (HTML)	7/25/22	Active
PS-021	SIMM 5340- C: Requirements to Respond to Incidents Involving a Breach of Personal Information UPDATES (HTML)	7/25/22	Active
PS-020	PS 020 - Post Implementation Evaluation Report (PIER) UPDATES (HTML)	3/21/22	Active
PS-019	Security Risk Register and Plan of Action and Milestones (POAM) Reporting (HTML)	3/15/22	Active
PS-018	Updated SIMM 19 Project Approval Lifecycle (HTML)	3/9/22	Active
PS-017	ADA Updated SIMM 30B Project Summary Package (HTML)	3/9/22	Active
PS-016	Phishing Exercise Standard (PDF)	11/9/21	Active
PS-015	ADA SIMM Updates (PDF)	7/16/21	Active
PS-014	California Cybersecurity Maturity Metrics (PDF)	5/26/21	Active
PS-013	Update on Release of Personal Information for Research (PDF)	5/13/21	Active
PS-012	Security Event Notification and Response Protocol(PDF)	3/29/21	Active
PS-011	Vulnerability Management Standard(PDF)	1/29/21	Active
PS-010	Phishing Exercise Standard (PDF)	10/20/20	Superseded by PS-016
PG-009	Cloud Security Standard (PDF)	8/19/20	Active
PG-008	Requirements to Respond to Incidents Involving a Breach of Personal Information (PDF)	2/26/20	Superseded by PS-022
PG-007	Project Approval Lifecycle, Stage 1 Business Analysis Submission Requirements for Agency-Affiliated State Entities (PDF)	2/14/20	Active
PG-006	Minimum Security Levels (PDF)	12/13/19	Active
PG-005	Privacy Threshold Assessment and Privacy Impact Assessment (PDF)	11/12/19	Superseded by PS-023
PG-004	Endpoint Protection Standard (HTML (PG-004)) (PDF (PG-004))	1/22/19	Active
PG-003	Email Threat Protection Standard (HTML (PG-003)) (PDF (PG-003))	10/29/18	Active
PG-002	Updated Information Technology Cost Report (HTML (PG-002)) (PDF (PG-002))	2/5/18	Active
PG-001	Updated Information Security Reporting Documents (PDF)	1/12/18	Active

Our department

Community of practice

State campaigns

Website Accessibility Certification