Information Security Policies

The Office of Information Security has issued the following rules and policies under the authority of 24-37.5-401 through 406, C.R.S. These policies apply to public agencies as defined in section 402 of that part. Rules in support of the Colorado Information Security Act.

Note: These Colorado Information Security Policies are updated as of Feb. 11, 2015 and supersede any policies posted prior to this date.