2.5b ERMUSR 02-14-2023 - Laserfiche WebLink

Home Browse Search

ERMU Commission Policy — G.2g3 Information Security Committee Charter The primary role of the Committee Chair is to run the Committee meetings and act as committee secretary. The Committee will adhere to the Current edition of Robert's Rules of Order Newly Revised for all situations to which they are applicable and are not inconsistent with ERMU's bylaws, policies, and any special rules of order that the Commission may adopt; and similarly, the Committee action shall not be inconsistent with applicable laws and policies which regulate the City of Elk River. The Committee meetings may be open or closed to employees at the discretion of the Committee Chair. AUTHORITY: Except as established in this Committee Charter, the authority of the Committee is limited to the purpose of research and recommendation to ERMU and the City. SPECIFIC DUTIES: Policies and Procedures: Assist ERMU and the City in the development of information security related policies. Review effectiveness of information security policy implementations. Identify and recommend how to handle non-compliance. Assist with the development of information security related procedures, standards, guidelines, and baselines to the ERMU and the City. At least annually, provide timely reports including recommendations regarding effectiveness of polices and procedures to ERMU and City leadership teams. 2. Risk Assessment: Review industry appropriate information security trends to maintain an up- to-date perspective on related risks and industry's best practice risk mitigation methods. Identify significant threats and vulnerabilities. Assess the adequacy and coordination of the implementation of information security controls. Recommend methodologies and processes for information security. Evaluate ongoing related legal and regulatory compliance changes. Review incident information and recommend follow-up actions. At least annually, provide timely reports including recommendation regarding risks assessment to ERMU and City leadership teams. 3. Budget Development: Develop data needed for thorough evaluation of proposed information security initiatives for budget preparation and consideration. Information shall include options, risk evaluation, resource requirements, implementation timelines, and costs. At least annually and coordinating with their respective budgeting process schedules, provide timely reports regarding information security initiatives proposed for consideration to ERMU and City leadership teams. 4. Education and Awareness: Function as an information security program champion providing clear direction and unity in ERMU and City leadership teams' support for approved security initiatives and policies. Develop and implement plans and programs to maintain information security awareness. Promote information security education, training, and awareness throughout ERMU and the City. SCHEDULE: Page 2 of 3