The letter states:
- The following policies have been retired, and their submissions are no longer required:
- SIMM 5330-A – Attachment D Part 2
- SIMM 5330-A – Attachment D Part 3
- SIMM 5330-E – Host/Hosted Self Certification
- SIMM 5330-G – Supported Technology Program Agreement
- Update to SIMM 5330-A Designation Letter and SIMM 5330-D Designation Letter Instructions:
- Introduce the definitions and requirements for newly established service types: Active Directory Environment, Security Boundary and Policy Boundary.
- Entities are now required to designate the service type for each responsible entity or entities.
- The state Office of Information Security will categorize each state entity into one of five categories: Self-Supporting, Self-Supporting with Sub-Entity, Limited Technical, Limited Program or Host/Hosted. This will be based on where service responsibilities reside.