4.2 ERMUSR 08-08-2017 - Laserfiche WebLink

Home Browse Search

ERMU Management Policy—A.24a Information Security Committee Charter the Committee action shall not be inconsistent with applicable laws and policies which regulate the City of Elk River. The Committee meetings may be open or closed to employees at the discretion of the Committee Chair. AUTHORITY: Except as established in this Committee Charter, the authority of the Committee is limited to the purpose of research and recommendation to ERMU and City leadership teams. SPECIFIC DUTIES: 1. Policies and Procedures: Assist ERMU and City leadership in the development of information security related policies. Review effectiveness of information security policy implementations. Identify and recommend how to handle non-compliance. Assist with the development of information security related procedures, standards, guidelines, and baselines to the ERMU and City leadership teams. At least annually, provide timely reports including recommendations regarding effectiveness of polices and procedures to ERMU and City leadership teams. 2. Risk Assessment: Review industry appropriate information security trends to maintain an up- to-date perspective on related risks and industry's best practice risk mitigation methods. Identify significant threats and vulnerabilities. Assess the adequacy and coordination of the implementation of information security controls. Recommend methodologies and processes for information security. Evaluate ongoing related legal and regulatory compliance changes. Review incident information and recommend follow-up actions. At least annually,provide timely reports including recommendation regarding risks assessment to ERMU and City leadership teams. 3. Budget Development: Develop data needed for thorough evaluation of proposed information security initiatives for budget preparation and consideration. Information shall include options, risk evaluation, resource requirements, implementation timelines, and costs. At least annually and coordinating with their respective budgeting process schedules, provide timely reports regarding information security initiatives proposed for consideration to ERMU and City leadership teams. 4. Education and Awareness: Function as an information security program champion providing clear direction and unity in ERMU and City leadership teams' support for approved security initiatives and policies. Develop and implement plans and programs to maintain information security awareness. Promote information security education, training, and awareness throughout ERMU and the City. SCHEDULE: At a minimum, the Committee shall meet on an annual basis. Page 2 of 3 44