Department: Universal Services
Department Head/Elected Official: Sindhu Menon - Executive Director & Chief Information Officer
Regular or Supplemental RCA: Regular RCA
Type of Request: Policy
Project ID (if applicable): n/a
Vendor/Entity Legal Name (if applicable): n/a
MWDBE Contracted Goal (if applicable): n/a
MWDBE Current Participation (if applicable): n/a
Justification for 0% MWDBE Participation Goal: N/A - Goal not applicable to request
Request Summary (Agenda Caption):
title
Request for approval to update the Harris County Information Technology Access Control Policy.
end
Background and Discussion:
The Harris County Information Technology Access Control Policy (the Policy) protects networks, applications and data from unauthorized access through the application of technical and procedural controls that are the foundation for a secure and resilient environment.
The Policy was first passed by Commissioners’ Court in 2014 and has not been updated since then. The proposed update to the Policy is designed to be attainable, while addressing existing and emerging risks related to different types of accounts and vendors in our environment, shifts in technology, evolution of our services, and changes in the workplace. Sections added to the Policy include:
o Separate User Credentials
o Password Requirements for Third-Party Accounts
o Password Aging
o Out of County Access
o Encryption
The purpose of this Policy is to define the principles of access management and provide guidance to ensure access to and use of information and technology within Harris County is controlled in a manner that preserves confidentiality, integrity, and availability. This includes all internal technologies, systems, and applications throughout Harris County.
Expected Impact:
The expected impact of the Policy is enhanced cybersecurity, auditability, and compliance through the mitigation of risks of cyberattacks, unauthorized access, disclosure of confidential and/or sensitive information, and non-compliance with regulatory requirements.
Alternative Options:
Alignment with Goal(s):
_ Justice and Safety
_ Economic Opportunity
_ Housing
_ Public Health
_ Transportation
_ Flooding
_ Environment
x Governance and Customer Service
Prior Court Action (if any):
|
Date |
Agenda Item # |
Action Taken |
|
02/24/2015 |
15.04, 4.c |
Approved |
Location:
Address (if applicable):
Precinct(s): Countywide
|
Fiscal and Personnel Summary |
|
Service Name |
|
|
|
FY 24 |
FY 25 |
Next 3 FYs |
|
Incremental Expenditures (do NOT write values in thousands or millions) |
|
Labor Expenditures |
$ |
$ |
$ |
|
Non-Labor Expenditures |
$ |
$ |
$ |
|
Total Incremental Expenditures |
$ |
$ |
$ |
|
Funding Sources (do NOT write values in thousands or millions) |
|
Existing Budget |
|
Choose an item. |
$ |
$ |
$ |
|
Choose an item. |
$ |
$ |
$ |
|
Choose an item. |
$ |
$ |
$ |
|
Total Current Budget |
$ |
$ |
$ |
|
Additional Budget Requested |
|
Choose an item. |
$ |
$ |
$ |
|
Choose an item. |
$ |
$ |
$ |
|
Choose an item. |
$ |
$ |
$ |
|
Total Additional Budget Requested |
$ |
$ |
$ |
|
Total Funding Sources |
$ |
$ |
$ |
|
Personnel (Fill out section only if requesting new PCNs) |
|
Current Position Count for Service |
- |
- |
- |
|
Additional Positions Requested |
- |
- |
- |
|
Total Personnel |
- |
- |
- |
Anticipated Court Date: January 30, 2024
Anticipated Implementation Date (if different from Court date):
Emergency/Disaster Recovery Note: Not an emergency, disaster, or COVID-19 related item
Contact(s) name, title, department: Nicole Broyles, Senior Manager, Policy, Universal Services
Attachments (if applicable): Harris County Information Technology Access Control Policy