Policies and Standards

An ad hoc or standing group of subject matter experts who support the development and maintenance of policies, standards and/or guidelines.

A mandatory periodic review of a technical policy and standard that:

Determines the continued need for the policy or standard, and
Evaluates the full content of the policy or standard for accuracy, clarity and completeness.

Sunset reviews may occur ahead of the published sunset review date if needed. Policies and standards do not expire when a sunset review date is reached.  

A standard provides more details about how a policy or portions of policy will be implemented.

A technology policy outlines what needs to be accomplished or achieved and the roles and responsibilities of the various entities.

Per RCW 43.105.020, "Information technology" includes, but is not limited to, all electronic technology systems and services, automated information handling, system design and analysis, conversion of data, computer programming, information storage and retrieval, telecommunications, requisite system controls, simulation, electronic commerce, radio technologies, and all related interactions between people and machines.

A guideline is a compilation of best practice offered in support of a policy or standard.

The processes, groups and activities associated with decision making and the exercising of authority.

The latest date a manufacturer will provide security patches.  Some manufacturers have an end of mainstream support date and an extended end-of support date.  In these cases, after the end of mainstream support, no additional software feature/function enhancements or fixes are issued but security patches are until the end of extended support.  The recommended best practice is to migrate before end of mainstream support.

All public-facing content, including websites, applications, documents and media, blog posts, and social media content. Certain non-public-facing content that must also comply.

General content changes like an organization, name, phone number, mailbox or URL in a policy or standard or a clarification or other revision that does not change the effect of the policy or standard.