IOT’s Governance, Risk & Compliance and Resiliency team is drafting the policy in conjunction with StateRAMP dba GovRAMP. The policy will be reviewed by IOT, the Indiana Department of Administration and the Management Performance Hub before final approval.