About GITA     Statutes and Rules     Contact GITA

Group 2 Agencies -- FY 2009
Technology Infrastructure Standards Assessment (TISA)

Background

An annual IT Planning and Standards Assessment is required to be submitted to GITA by each Group 2 agency per statewide IT Planning Policy, P136. An online IT planning and Standards self-assessment survey, Technology Infrastructure Standards Assessment (TISA) is available at www.azgita.gov/planning/, which addresses agency IT trends and issues, business objectives, IT goals and objectives as well as IT security and privacy compliance.

Purpose

The purpose of the IT Plan and Standards self-assessment survey (TISA) is threefold:

• Streamline IT planning and assess current overall security and privacy standards compliance among Group 2 agencies;

• Remind agencies about current security, privacy and enterprise architecture standards;

• Aid in the identification of agency IT security and privacy vulnerabilities as well as deviations in complying with other statewide standards.

Any vulnerabilities and compliance deviations should then be addressed in the agency’s IT plan explanation section and/or IT Standards compliance comments section.

Requirements

Each Group 2 agency must assess its IT environment, using the TISA application, by September 2nd this year. If there has been significant change to an agency’s risk posture (either an increase or decrease), mid-year updates to TISA are encouraged. Justification of each proposed change on agency letterhead is required in advance with submittal to the State Chief Information Security Officer.

For FY 2009, it is important for the Group 2 agencies to understand and comply with the statewide Information Technology Enterprise Architecture, Security and Privacy policies, standards and best practices located at www.azgita.gov/policies_standards/. In addition, agencies must explain non-compliance (NO responses) and gap closure actions in the appropriate “explanation” and/or “comments” box on TISA, when addressing the 17 new IT Standards Compliance questions. Agencies will note a renewed focus on privacy this year but it will eventually become a separate compliance application as it is seen as the primary responsibility of Business rather than IT.
 

Questions

For access to the TISA application or general questions, contact the IT Planning Manager at 364-4784 or jlittleton@azgita.gov. For specific questions regarding compliance with IT security standards, contact Homeland Security Technology Manager at 364-4771 or jryan@azgita.gov.

Top

Privacy Statement | Accessibility

Copyright 2003 Government Information Technology Agency, All Rights Reserved.