Chapter 4 – Information Technology

49230.4 Policy Directives

• The department shall:

  • Maintain a detailed inventory of all approved department state-owned, commercial and open-source software, including licensing requirement(s), currency, and the cost of the software.

  • Control and manage all instances and usage of approved department software installed on department information assets in order to comply with all applicable legal, copyright, and licensing requirements.

  • Establish a continuous monitoring process to identify, detect, and remove all unapproved department software installed or operating on department information assets.

  • Develop, implement, and maintain a software management plan.

  • Identify and track any department software that is at end-of-support /end-of-life, and shall ensure that maintenance agreements and processes are in place where appropriate to ensure software can remain operational to meet business requirements.

  • Establish and maintain controls to prevent unauthorized personnel from installing software applications on state information assets.