Language Translation
  Close Menu

Information Security Framework

The Indiana Office of Technology (IOT) has instituted an Information Security Framework (ISF) that sets policy, establishes control objectives and controls, and describes the standards that are necessary to secure the State of Indiana’s information technology resources. The ISF is confidential by law, and IOT will only make it available to third-party entities that have (or are seeking) a business relationship with the State after such entities have agreed to the terms of the nondisclosure agreement (NDA) available below.

To obtain the ISF, please download and complete the NDA, then return the completed document to IOT via email to

* The subject line of your email must state: [Company name] Request for IOT ISF [Date of Request]
* The subject body of email must include all of the following information:

  • The name(s) of contact representatives with phone number(s) and email address(es).
  • The name of your company
  • The complete Request for Proposal (RFP) or Request for Information (RFI) number associated with your business need for the ISF.
  • The name of the State agency with which you are conducting business.
  • The name of at least one State contact representative within that agency.

IOT Security will validate your business need with the contact agency before sharing the ISF. IOT Security will not provide the ISF to your company until confirmation occurs.

IOT News

Click here to view more events

Top FAQs