Department: Universal Services
Department Head/Elected Official: Sindhu Menon - Executive Director & Chief Information Officer
Regular or Supplemental RCA: Regular RCA
Type of Request: Policy
Project ID (if applicable): n/a
Vendor/Entity Legal Name (if applicable): n/a
MWDBE Contracted Goal (if applicable): n/a
MWDBE Current Participation (if applicable): n/a
Justification for 0% MWDBE Participation Goal: N/A - Goal not applicable to request
Request Summary (Agenda Caption):
title
Request for approval to update the Harris County Information Technology Access Control Policy.
end
Background and Discussion:
The Harris County Information Technology Access Control Policy (the Policy) protects networks, applications and data from unauthorized access through the application of technical and procedural controls that are the foundation for a secure and resilient environment.
The Policy was first passed by Commissioners' Court in 2014 and has not been updated since then. The proposed update to the Policy is designed to be attainable, while addressing existing and emerging risks related to different types of accounts and vendors in our environment, shifts in technology, evolution of our services, and changes in the workplace. Sections added to the Policy include:
o Separate User Credentials
o Password Requirements for Third-Party Accounts
o Password Aging
o Out of County Access
o Encryption
The purpose of this Policy is to define the principles of access management and provide guidance to ensure access to and use of information and technology within Harris County is controlled in a manner that preserves confidentiality, integrity, and availability. This includes all internal technologies, systems, and applications throughout Harris County.
Expected Impact:
The expected impact of the Policy is enhanced cybersecurity, auditability, and compliance through the mitigation of risks of cyberattacks, unauthorized access, disclosure of confidential and/or sensitiv...
Click here for full text