HHS OCIO Policies, Standards and Charters

HHS Policy for IT Capital Planning and Investment Control (CPIC)

See Procedures Section for CPIC Procedures Document and its related Appendices Document

2005-0005.001

12/30/2005

HTML

[ DOC - 153KB]

HHS IRM Policy for Conducting Information Technology Alternatives Analysis

2003-0002

06/13/2003

HTML

[ DOC - 121KB]

HHS IRM Policy for Conducting Information Technology Alternatives Analysis – superseded by Policy 2003-0002

2000-0002

01/08/2001

HTML

[ DOC - 86KB]

HHS IRM Policy for Capital Planning and Investment Control – superseded by Policy 2005-0005.001

2000-0001

01/08/2001

HTML

[ DOC - 276KB]

HHS IRM Guidelines for Capital Planning and Investment Control – superseded by Policy 2005-0005.001

2000-0001-GD

01/08/2001

HTML

[ DOC - 176KB]

HHS-OCIO Policy for IT Earned Value Management  

See Procedures Section for EVM Procedures Document

2007-0001

06/11/2007

HTML

[ DOC - 272 KB]

HHS OCIO Policy for E-Gov Forms

2006-0003

06/07/2006

[ DOC - 700KB]

HHS-OCIO IT Policy for Enterprise Architecture (EA)

2008-0003.001

08/07/2008

CIO Council Charter

2007-0001.001C

06/27/2007

HTML

[ DOC - 463KB]

HHS-OCIO IT Policy for HHSMail Change Management

2006-0002

03/02/2006

HTML 

[ DOC - 700KB]

HHS IRM Policy for Government Emergency Telecommunication System Cards Ordering, Usage and Termination

2002-0001

11/25/2002

HTML

[ DOC - 146KB]

HHS IRM Policy for Active Directory

2000-0010

01/08/2001

HTML

[ DOC - 75KB]

HHS IRM Policy for Public Key Infrastructure (PKI); Certification Authority (CA)

2000-0011

01/08/2001

HTML

[ DOC - 92KB]

HHS IRM Policy for Directory Services Using LDAP

2000-0012

01/08/2001

HTML

[ DOC - 84KB]

HHS Policy for IT Policy Development

2006-0004

11/28/2006

[ DOC - 224KB]

HHS IRM Policy For Comments From And Responses To Operating Divisions On Newly Developed Policies and CIO Council and ITIRB Clearance Documents

2003-0001

02/14/2003

HTML

[ DOC - 92KB]

HHS IRM Information Security Program Policy

2004-0002.001

12/15/2004

HTML

[ DOC - 461KB]

HHS IRM Policy for IT Security for Remote Access

2000-0005

01/08/2001

HTML

[ DOC - 96KB]

HHS IRM Policy for Establishing an Incident Response Capability

2000-0006

01/08/2001

HTML

[ DOC - 111KB]

HHS IRM Policy for Prevention, Detection, Removal and Reporting of Malicious Software

2000-0007

01/08/2001

HTML

[ DOC - 125KB]

HHS IRM Policy for Personal Use of Information Technology Resources

2006-0001

02/17/2006

HTML

[ DOC - 156KB]

HHS IRM Policy for Personal Use Of Information Technology Resources – superseded by Policy 2006-0001

2004-0001

11/23/2004

HTML

[ DOC - 235KB]

Personal Use Of Information Technology Resources – superseded by Policy 2004-0001

2000-0003

01/08/2001

HTML

[ DOC 121KB]

HHS Policy for Records Management

2007-0004.001

01/30/2008

HTML

HHS Policy for Electronic Records Management - superceded and obsolete by Policy 2007-0004.001

2005-0001

09/15/2005

HTML

[ DOC - 156KB]

HHS Policy for Internet Domain Names

WEB-2005-01

06/13/2005

HTML

Use of Broadcast Messages, Spamming and Targeted Audiences

2000-0004

01/08/2001

HTML

[ DOC - 103KB]

Domain Names – superseded by Policy WEB-2005-01

2000-0008

01/08/2001

HTML

[ DOC - 79KB]

Usage of Persistent Cookies

2000-0009

01/08/2001

HTML

[ DOC - 79KB]

HHS-OCIO CPIC Procedures

2005-0005P

12/30/2005

[DOC - 153KB]

 HHS-OCIO CPIC Procedure-Appendix

2005-0005P-A

12/30/2005

[DOC - 153KB]

HHS-OCIO EVM Procedures

2005-0004P

12/30/2005

[DOC - 1.2 MB]

HHS Records Management Council Charter

2007.0002.001C

  08/21/2007