1.6 ERMUSR 03-08-2022 - Laserfiche WebLink

Home Browse Search

ERMUCommissionPolicyG.2g3Information Security CommitteeCharter ______________________________________________________________________________ the Committee action shall not be inconsistent with applicable laws and policies which regulate the City of Elk River. The Committee meetings may be open or closed to employees at the discretion of the Committee Chair. AUTHORITY: Except as established in this Committee Charter, the authority of the Committee is limited tothe purpose of research and recommendation to ERMU and the City. SPECIFIC DUTIES: 1.Policies and Procedures:Assist ERMU andtheCityin the development of information security related policies.Review effectiveness of information security policy implementations.Identify and recommend how to handle non-compliance. Assist with the development of information security related procedures, standards, guidelines, and baselines to the ERMU and theCity.At least annually, provide timely reportsincluding recommendations regarding effectiveness of polices and procedures to ERMU and City leadership teams. 2.Risk Assessment:Review industry appropriate information security trendsto maintain an up- to- Identify significant threats and vulnerabilities. Assess the adequacy and coordination of the implementation of information security controls. Recommend methodologies and processes for information security. Evaluate ongoing related legal and regulatory compliance changes. Review incident information and recommend follow-up actions. At least annually, provide timelyreportsincluding recommendationregarding risksassessment to ERMU and City leadership teams. 3.Budget Development:Develop dataneeded for thorough evaluation of proposed information security initiativesfor budget preparation and consideration. Information shall include options, risk evaluation, resource requirements, implementation timelines, and costs. At least annually and coordinating with their respective budgeting process schedules, provide timely reports regarding information security initiatives proposed for consideration to ERMU and City leadership teams. 4.Education and Awareness:Function as an information security program champion providing roved security initiatives and policies.Develop and implement plans and programs to maintain information security awareness. Promote information security education, training, and awareness throughout ERMU and the City. SCHEDULE: At a minimum, the Committee shall meet on an annualbasis. ______________________________________________________________________________ Page 2of3 16