If an agency Internet-facing server gathers or transmits sensitive data, the application must use, at minimum, SSL for the transaction. The agency must acquire the Certificate Authority signed certificate for this server from ITS.
36 Miss. Code. R. 1-9.2