EOHHS Environment definition
Examples of EOHHS Environment in a sentence
All EOHHS personnel must secure media in any form in the EOHHS Environment so that Information Resources contained on those media are secured.
This documentation will provide the relevant decision maker with facts necessary to make reasonably informed decisions about introducing security vulnerabilities into the EOHHS Environment.
Reportable Events include any Event in the EOHHS Environment that highlights the potential for a Security Incident to occur.
Movements of media containing Sensitive Information outside of the EOHHS Environment should be documented such that access to the media and custody of the media can be attested to throughout transit.
Digital media must have an owner and devices without a specific owner must not be used in the EOHHS Environment.
Any System in the EOHHS Environment that has any known Risks when deployed to Production must be appropriately documented via an ATO and/or Operational Risk Assessment.
These have been drafted with an eye towards: • Federal and State legal requirements • Specific data source contractual requirements • Commonwealth enterprise policies and standards (available at: ▇▇▇▇▇://▇▇▇.▇▇▇▇.▇▇▇/handbook/enterprise-information-security-policies-and-standards) • Extant good practice at Agencies and within Information Systems • Other factors as appropriate The need for this broadly applicable set of standards is clear when looking at the EOHHS Environment in its entirety.
Staff are not restricted in the kinds of media they may use in the EOHHS Environment and all digital (e.g.: USB flash drive) and non-digital media (paper) are permitted.
Given the nature of these controls and the interconnectedness of the EOHHS Environment, no individual Agency group is appropriately equipped to approve non-conformance to these standards.
If an EOHHS employee has not met these requirements, they shall not be provided access to Information Resources in the EOHHS Environment.