To help protect critical information resources, DIR offers information security products and services in Cooperative Contracts through vendor partners. (Learn how to order these products and services.)


DIR has implemented a governance, risk and compliance software tool available to all state agencies and institutions of higher education. The SPECTRIM portal provides incident management and analysis, risk assessment analysis and agency security plan template preparation.

Elected Services

DIR also offers elected Security Services that are available at no cost to agencies. These services are Controlled Penetration Testing, Web Application Vulnerability Scanning and Vulnerability Scans. These services must be requested and scheduled.       

Security Assessments 

DIR offers comprehensive security assessments for state agencies and institutes of higher education (IHE). 

These risk assessments gauge the 'health' of the organization, and provide lists of strengths and weaknesses to management, along with a roadmap and suggested plans to improve the security posture for the organization.  The assessments also show the organization's security posture compared to other state organizations.

DIR hosted a webinar to discuss the assessment process and what organizations need to get started. This webinar is approximately one hour in length. CLICK HERE TO VIEW THE WEBINAR.

To learn more about the security assessment process, or to schedule a security assessment, contact

Decision Support

DIR offers access to education and research regarding security governance, best practices, policies and architecture to state security practitioners, architects, IT managers and key executives. This access to education and research is available through several convenient formats including online, tools, subject matter expertise, white papers, articles, and webinars.

If you have a license, and would like to view a webinar that discusses the features of these research licenses, CLICK HERE TO VIEW THE WEBINAR.

To learn more about the research license availability, contact

Network Security Services

​DIR provides network information security services when an agency utilizes DIR-provided internet services.