IT Security ensures that an organization's material and software resources are used only for their intended purposes. At ITD, security is a part of everything we do. 

ITD offers consulting on Security Best Practices and provides leadership in building Security Awareness.

Security Goals

1. Integrity: Guaranteeing that data is what it is believed to be
2. Confidentiality: Ensuring that only authorized individuals have access to the resources being exchanged
3. Availability: Guaranteeing the proper operation of information systems
4. Non-repudiation: Guaranteeing that an operation cannot be denied
5. Authentication: Ensuring that only authorized individuals have access to the resources

Security Awareness

One of ITD's roles is to foster information security awareness.

• Security Awareness Tutorial
• Security Best Practices
• Monthly Security Tips
• Cyber Threat Level Indicator
• Multi-State Information Sharing and Analysis Center (MS-ISAC)
• United States Computer Emergency Readiness Team (US-CERT)
  • Cyber Security Alerts
  • Current Activity
• National Cyber Security Alliance 
• Microsoft Safety and Security Center
  • Security Bulletins

Security Officers

Securing IT resources within ND state government requires collaboration among stakeholders. In accordance with the Incident Prevention/Response/Notification Standard, each customer of ITD shall designate an agency contact. That person, know as the agency's Security Officer, becomes part of a proactive group that communicates and corrects security incidents and vulnerabilities.

The primary communication channels used is the Security Officer's ListServ. For confidentiality reasons, membership to the list is managed by ITD. Customers may Join the Security Officer's Listserv by completing an online request.

Password Changes

ITD uses a challenge-question process to verify the identity of anyone requesting a password change. Individuals are required to complete an Online Password Information Form or provide the Service Desk with a Password Change Information Form (SFN52378) before ITD can reset their password.

References

• Juniper SSL VPN Requirements
• Securing Multi-Function Print Devices