Referred to: The Ways and Means Committee (Chairman Gavaris and Legislators Collins, Hansut, Kovacs, Nolan, Roberts, and Uchitelle)

Chairman of the Ways and Means Committee, John Gavaris, and Deputy Chair Kevin A. Roberts offer the following:

WHEREAS, this resolution has been submitted at the request of the County Executive on behalf of the Department of Information Services; and

WHEREAS, Ulster County Government is highly dependent on the use of information technology, communications systems, and other digital and electronic resources for the effective management of government programs that deliver services and perform administrative functions; and

WHEREAS, in the development of this policy, the Department of Information Services has sought advice and recommendations from the Department of Homeland Security & Emergency Services (DHS-ES), the National Institute for Standards and Technology (NIST), the Cyber & Infrastructure Security Agency (CISA), and New York State Information Technology Services (NYS ITS); and

WHEREAS, Ulster County acknowledges that a modern Information Security Policy, as an umbrella to all other Information Technology policies, is necessary to provide a broad outline to how Ulster County will protect its information and technology assets by establishing a high-level overall strategy for information security, including roles, responsibilities, and procedures while giving Ulster County Information Services Department the flexibility required to respond and adapt technology solutions, standards and/or procedures accordingly with minimal policy updates; and

WHEREAS, in order to remain in compliance with mandates of Federal, State and Local Law, if any provision of this policy is changed or becomes in conflict with Federal, State or Local Law, such Law will preempt the policy, and revision(s) will be made accordingly; and

WHEREAS, employees will be provided with notice that revisions have been made and the location of the revised policy(s); now, therefore, be it

RESOLVED, that the Ulster County Information Services/Information Security Policy, in the form as filed with the Clerk of the Legislature, and marked as “Exhibit A” is hereby adopted,

and moves its adoption.

ADOPTED BY THE FOLLOWING VOTE:

AYES:                       NOES:             

Passed Committee: Ways and Means on ________________.

FINANCIAL IMPACT:

NONE