To: Board of County Commissioners
Through: Philip Savino, Director, Information Technology
Prepared By:
prepared
Philip Savino, Director, Information Technology
end
Subject:
title
County-wide Information Security Policy
end
Purpose and Request:
recommended action
The purpose of this report is to provide the proposed Information Security Policy for approval by the Board of County Commissioners. At their meeting on June 4, 2024, the Board approved adding this item to the consent agenda for formal approval.
end
Background and Discussion:
This Information Security Policy is designed to enhance protection and compliance across all digital information handled by the county.
The Information Security policy is crucial for safeguarding sensitive data and ensuring that all county employees adhere to the highest standards of security. The development of the Information Security policy included thorough collaboration with the County Attorney's office and County executive leadership, to identify and integrate all applicable laws relevant to the county's operations.
This comprehensive approach ensures that the policy is both effective and compliant with legal standards, supporting our ongoing commitment to information security and integrity.
We believe that the County-Wide Information Security Policy is essential for the following reasons:
Protection of Sensitive Data: We hold vast amounts of sensitive data, including residents' personal information, financial records, and critical government data. The Information Security Policy will ensure robust safeguards are in place to protect this information.
Operational Continuity: Cyberattacks can disrupt essential services, causing significant downtime and inconvenience. The policy ensures that our employees and systems are resilient and capable of maintaining essential operations even during security incidents.
Compliance and Legal Requirements: Government agencies are increasingly held to stringent cyber...
Click here for full text