Chatham County Comprehensive IT Policy

1
Chatham CountyComprehensive IT Policy

• Personnel Training

2
IT Training Overview

• Why Security?
• Acceptable Use
• Account Management
• Anti-Virus
• Audit Policy
• Email
• Password Policy
• Physical Access
• Incident Management

3
Why Security?

• Viruses
• Worms
• Trojans
• Hackers
• Accidents
• Malicious Users
• HIPAA

4
Acceptable Use

• Applies to all Employees
• Privacy Matters
• Property of Chatham
• Public Record
• May be Monitored
• Authorized Users Only

5
Unacceptable Use

• Do Not Use County Equipment For
• Illegal Activities
• Harassment
• Personal Business
• Network Tinkering
• Spamming

6
Account Management
Requested by Supervisor Rights assigned by Superv
isor Unique ID and Password Requests made on Web
site

7
Antivirus Protection
Current Engine and Definitions
Updated by Server Email Attachments Save Importa
nt Data
Preview Pane
8
Audit Policy
Monitor Activity Ensure Integrity Investigate In
cidents

9
Password Policy

Change Regularly No Sticky Notes 8 Characters
Upper and Lower Case Numbers and Letters Special
Characters
10
Password Policy
EXAMPLES Bad mustang Better 2001Mustang Be
st
Iluv2dmFM!

11
Email Policy
Public Record Use Disclaimer No Private Email fo
r County Business
Change Password Be Careful!
12
Physical Access
Do Not Share Keys Authorized Users Lock it Down
Report Incidents Leave on at Night Shutdown on
Weekend

13
Incident Management

• Report to Supervisor
• Supervisor Reports to MIS
• Investigation by ISO
• Charges May be Filed with HR and Law Enforcement

14
Summary
Lock it Down Protect Password Be Smart with Emai
l
Report Incidents Shut Down on Weekends
15
Summary
IF IN DOUBT CHECK IT OUT Comprehensive IT Polic
yFound on Website
Call MIS
16
Questions