Department of Information Systems
Information handled by computer systems must be adequately protected against unauthorized modification, disclosure, or destruction. Virus scanning software has proven effective in protecting state resources from viruses, worms, and other types of malicious code.
This standard statement applies to all state agencies, boards, commissions and institutions of higher education.
The Arkansas Information Systems Act of 1997
(Act 914, 1997) gives the Office of Information Technology the authority to define standards, policies and procedures to manage the information resources within the state. This is accomplished through work with a multi-agency working group known as the Shared Technical Architecture Team.
In addition, Act 1042 of 2001 states that the Executive Chief Information Officer oversee the development of information technology security policy for state agencies.
4.1 Arkansas State Government Information Resources Security Policy Guidelines
4.2 Act 914 of 1997: Authorized the Office of Information Technology (OIT) to develop statewide policies.
4.3 Act 1042 of 2001: Authorized the Executive CIO to develop security policy.
5.2 All microcomputer workstations and servers attached to the state network shall have updated virus protection software installed and enabled.
5.2 At a minimum, virus definitions shall be updated weekly.
The agency shall be able to demonstrate compliance.
None
8.1 Virus: A programming code usually disguised as something else that causes some unexpected and usually undesirable event. It is often designed so that it automatically spreads to other computer users. Viruses can be transmitted as attachments to an e-mail, as downloads, or be present on a diskette or CD. The source of the e-mail, downloaded file, or diskette is often unaware of the virus.
8.2 Worm: A self-replicating virus that does not alter files but resides in active memory and duplicates itself; operates through automatic parts of an operating system and is usually invisible to user.
8.3 Workstations and Servers: In this standard, workstations and servers are defined as computers that are capable of becoming infected with a virus, worm, or other malicious code.
Antivirus software links:
Virus scanning is an effective way to prevent damage and destruction to your computer system caused by worms, viruses, and other types of malicious code.
There are numerous effective virus scanning products available to users and organizations that have been proved successful in preventing unwanted attacks.
State security standard requires agencies to adhere to these two (2) rules:
Often, the source of the email, diskette, or CD is unaware of the virus.
If you have questions about Virus Scanning standards contact:
Office of the Executive Chief Information Officer
(501) 682-4300
http://www.cio.arkansas.gov/security
If you have questions about virus scanning problems please contact your network administrator / information technology support staff or the Department of Information Systems' Customer Care Center at:
(501) 682-HELP (682-4357)
http://www.dis.arkansas.gov/contact_dis/customer_care.html