HHS OCIO Policies, Standards and Charters

HHS OCIO Policy for Information Technology (IT) Enterprise Performance Life Cycle (EPLC)

2008-0004.001

10/06/2008

HTML

[ DOC - 206KB]

HHS Policy for IT Capital Planning and Investment Control (CPIC)

See Procedures Section for CPIC Procedures Document and its related Appendices Document

2005-0005.001

12/30/2005

HTML

[ DOC - 153KB]

HHS IRM Policy for Conducting Information Technology Alternatives Analysis

2003-0002

06/13/2003

HTML

[ DOC - 121KB]

HHS-OCIO Policy for IT Earned Value Management  

See Procedures Section for EVM Procedures Document

2007-0001

06/11/2007

HTML

[ DOC - 272 KB]

HHS-OCIO IT Policy for Enterprise Architecture (EA)

2008-0003.001

08/07/2008

HHS-OCIO IT Policy for HHS Mail Change Management

2006-0002

03/02/2006

HTML 

[ DOC - 700KB]

HHS IRM Policy for Government Emergency Telecommunication System Cards Ordering, Usage and Termination

2002-0001

11/25/2002

HTML

[ DOC - 146KB]

HHS IRM Policy for Active Directory

2000-0010

01/08/2001

HTML

[ DOC - 75KB]

HHS IRM Policy for Public Key Infrastructure (PKI); Certification Authority (CA)

2000-0011

01/08/2001

HTML

[ DOC - 92KB]

HHS IRM Policy for Directory Services Using LDAP

2000-0012

01/08/2001

HTML

[ DOC - 84KB]

Use of Broadcast Messages, Spamming and Targeted Audiences

2000-0004

01/08/2001

HTML

[ DOC - 103KB]

HHS Policy for IT Policy Development

2006-0004

11/28/2006

[ DOC - 224KB]

HHS OCIO Policy for E-Gov Forms

2006-0003

06/07/2006

[ DOC - 700KB]

HHS IRM Policy for Personal Use of Information Technology Resources

2006-0001

02/17/2006

HTML

[ DOC - 156KB]

HHS IRM Policy For Comments From And Responses To Operating Divisions On Newly Developed Policies and CIO Council and ITIRB Clearance Documents

2003-0001

02/14/2003

HTML

[ DOC - 92KB]

HHS IRM Information Security Program Policy

2004-0002.001

12/15/2004

HTML

[ DOC - 461KB]

Usage of Persistent Cookies

2000-0009

01/08/2001

HTML

[ DOC - 79KB]

HHS IRM Policy for Prevention, Detection, Removal and Reporting of Malicious Software

2000-0007

01/08/2001

HTML

[ DOC - 125KB]

HHS IRM Policy for Establishing an Incident Response Capability

2000-0006

01/08/2001

HTML

[ DOC - 111KB]

HHS IRM Policy for IT Security for Remote Access

2000-0005

01/08/2001

HTML

[ DOC - 96KB]

HHS Policy for Records Management

2007-0004.001

01/30/2008

HTML

HHS Policy for Internet Domain Names

WEB-2005-01

06/13/2005

HTML

Domain Names – superseded by Policy WEB-2005-01

2000-0008

01/08/2001

HTML

[ DOC - 79KB]

HHS-OCIO CPIC Procedures

2005-0005P

12/30/2005

[DOC - 153KB]

 HHS-OCIO CPIC Procedure-Appendix

2005-0005P-A

12/30/2005

[DOC - 153KB]

HHS-OCIO EVM Procedures

2005-0004P

12/30/2005

[DOC - 1.2 MB]

HHS-OCIO Standard for Security Configurations Language in HHS Contracts

CIO Council Charter

2007-0001.001C

  06/27/2007