Open main menu Security Statement Colorado.gov adheres to five main security standards: Sarbanes-Oxley – Legislation passed in 2002 to establish corporate accountability for financial transactions. Payment Card Industry Data Security Standards – Developed for members, merchants and service providers that transmit, store or process payment card information. Cybertrust Enterprise Security Management Program – A comprehensive security assessment program aimed at identifying vulnerabilities at all levels. The Program is comprised of 186 Essential Practice controls, which each have a minimum verification method NICUSA, Colorado.gov's parent company, and its subsidiaries use to secure their environments. The five principle verification methods are: policy review, attestation by qualified authority, demonstration, inspection, and testing. State Security Standards – The Technology Security Policy details the statewide IT policy that applies to all state agencies, CRS 24-37.5-102(5). Core policies addressed are: privacy, interoperability, infrastructure, lifecycle management, project management, and aggregation. NICUSA Policies – Colorado.gov evaluates and modifies security standards based on vast experience and knowledge from the other NICUSA portals in 34 states. Alerts Emergency Response Guide Emergency Management Homeland Security Travel Alerts Road Conditions Cyber Security Help Center Contact Us Governor's Dashboard Transparency Online Project (TOPS) Registered Services Feedback 211 Health 211 Health Western Colorado 511 Traffic 811 Dig Policies Accessibility Legal Notices Linking Policy Privacy Statement Security Statement Supported Browsers Government Governor Jared Polis Lt. Governor Dianne Primavera Attorney General Phil Weiser Secretary of State Jena Griswold State Treasurer Dave Young Legislators Courts Connect @coloradogov @coloradogov © 2021 State of Colorado