Laserfiche WebLink
Elk River <br /> Municipal Utilities UTILITIES COMMISSION MEETING <br /> TO: FROM: <br /> ERMU Commission Troy Adams, P.E. - General Manager <br /> MEETING DATE: AGENDA ITEM NUMBER: <br /> August 8, 2017 4.2 <br /> SUBJECT: <br /> Information Security Committee <br /> ACTION REQUESTED: <br /> Appoint a Commission representative to the Information Security Committee <br /> BACKGROUND: <br /> In 2017 the ERMU leadership team identified information security as a priority. Information <br /> security was established as a strategic initiative and went through the 2017 budgeting process <br /> where an allocation of resources was approved by the Commission. <br /> The initiative had sufficient overlap with the City of Elk River that it was beneficial to both <br /> parties to establish a collaborative effort. ERMU and City staff worked jointly to develop a scope <br /> of work,reviewed quotes, and selected a consultant to perform a joint information security <br /> assessment. <br /> DISCUSSION: <br /> One of the early recommendations from the consultant was to develop an information security <br /> committee which would assist with the development of policy language, perform and report on <br /> risk assessment, develop data needed for the budgeting process, and assist with staff education <br /> and awareness. <br /> There are benefits to creating a joint ERMU and City Information Security Committee which <br /> include sharing of information and costs. The City Administrator has agreed to create the joint <br /> committee and to serve in an advisory role to ERMU and City management. The committee <br /> charter is attached for reference. <br /> Even though the committee has been created as a management advisory committee, it had been <br /> determined that representation from the governing bodies on this committee would be beneficial. <br /> Any work product from this committee resulting in an initiative requiring capital expenditure <br /> would be subject to any governance spending authority policy and/or approval budget procedure. <br /> And as a result, it would be beneficial to have Commission and Council representative on the <br /> committee who would have working knowledge of committee initiatives which may require <br /> approval through the budget process. <br /> ATTACHMENTS: <br /> • ERMU Management Policy - A.24a Information Security Committee Charter <br /> Page 1of1 <br /> 42 <br />