IT Security & Compliance Team

The Security and Compliance team is pivotal in safeguarding the county's information assets and ensuring adherence to regulatory standards. Their comprehensive responsibilities include:

• Technology Risk Assessments and Audits: The team conducts thorough assessments and audits to identify, evaluate, and mitigate risks associated with the County's information assets. By understanding potential vulnerabilities, they work to protect against unauthorized access or breaches.

• Policy and Procedure Development: They develop, implement, and regularly update policies and procedures that govern the use, security, and compliance of the County's IT resources. This framework ensures that all technology operations are aligned with industry best practices and legal requirements.

• Control System Design: The team designs robust control systems to safeguard the integrity, confidentiality, and availability of information. These controls are essential for preventing data breaches and ensuring the reliability of IT operations.

• Advancing Secure Initiatives: By leveraging technological opportunities, the team formulates strategies to enhance the County's security posture. This includes introducing cutting-edge security technologies and processes to address evolving threats.

• Records Management Oversight: The team oversees the County's records management function, ensuring that records are accurately maintained, properly archived, and securely managed. They develop and enforce policies that govern records retention, access, and disposal, aligning with legal and operational requirements.

Through these meticulous efforts, the Security and Compliance team strengthens the County's defenses against cyber threats while ensuring that records are managed in accordance with applicable laws and organizational policies. This dual focus not only enhances security but also ensures that the County's record-keeping practices support transparency, efficiency, and compliance.