Policies & Standards

Policies

CORA: Colorado Open Records Requests

Pursuant to C.R.S. §24-72-205, OIT does not impose a charge for the first hour of time expended in connection with the research and retrieval of public records. After the first hour, OIT charges $25 per hour for the research and retrieval of public records. When the number of pages produced in response to a records request exceeds 25 pages, OIT will charge $0.25 per page for all documents photocopied. CORA requests made of OIT should be submitted in writing, via email, to oit_cora@state.co.us.

Policies & Standards Issued By OIT

Acceptable Use Policy (AUP)

Credentialing/Identity Management

Data Management

Financial Services

  • Acquisition of IT Goods (Products) and/or Services 

    • The formal processes to purchase or acquire information technology products and/or services are described here.
  • Buying from State Price Agreements 
    • State Price Agreements may exist that do not meet mandatory OIT standards applicable to state agencies as defined in C.R.S. 24-37.5-102(4) or that require OIT approval prior to use. State agencies are therefore cautioned to ensure that any price agreement for communication and IT (C.R.S. 24-37.5-102(2)), hardware, software, radios, communication systems/towers meets OIT standards and that necessary OIT approvals have been obtained prior to use of the Price Agreement

Governance

Information Security

The Office of Information Security has issued the following policies, rules and standards under the authority of C.R.S. 24-37.5-401 et seq.   

  • Rules
(State Agency Cyber Security Planning)
  • Colorado Information Security Policies (CISPs): These policies are reviewed and updated annually but are subject to change more often as necessary. Unless otherwise noted, the policies below are effective as of October 4, 2019. 


Project Management

The Portfolio and Project Management Center of Excellence (PPMCoE) is responsible for setting policies and procedures related to project, program and portfolio management within the Office of Information Technology (OIT) and for Executive Branch agencies who embark on projects that include an IT component.

NOTE: the following documents are accessible to state employees only. If you are not a state employee and need access to one of the project management policies, please email oit@state.co.us 

Technical Standards

These State of Colorado technology standards support the state's information security policies.

The Office of Enterprise Architecture has issued the following technical standards, superseding any standards posted prior. Each standard has been approved by the OIT Architecture Review Board (ARB), effective as of the "Effective Date" established in each document, and remains in effect until removed or revised by a decision of the ARB.