Laserfiche WebLink
Indian River County, Florida <br />* * MEMORANDUM <br />�RIpA <br />File ID: 25-0468 Type: Consent Staff Report <br />TO: Indian River County Board of County Commissioners <br />THROUGH: John Titkanich, County Administrator <br />FROM: Racheal Miller, Cyber Security Technician <br />DATE: April 22, 2025 <br />SUBJECT: Information Technology Acceptable Use Policy Revision <br />QE <br />Indian River County <br />Administration Complex <br />1801 27th Street <br />Vero Beach, Florida 32960 <br />indianriver.gov <br />Meeting Date: 4/22/2025 <br />BACKGROUND <br />The Information Technology (IT) Department proposed the Board adopt revisions to Indian River County's <br />Acceptable Use Policy to address evolving cybersecurity threats and operational best practices. As the <br />technology landscape advances, the ways in which employees, contractors, and other stakeholders interact with <br />County information systems must be clearly defined to ensure security, efficiency, and compliance. <br />ANALYSIS <br />The IT Department has identified a critical gap in the Acceptable Use Policy related to removable media. While <br />the existing policy requires formal approval by the IT Department before using removable media, end users can <br />bypass this requirement, and in the process increasing the attack surface of County information systems and <br />exposing the County to unnecessary risks. <br />To appropriately address this issue, the IT Department has tested and is prepared to implement a solution that <br />will ensure compliance by preventing the use of unauthorized USB devices. Implementing a solution that will <br />only permit IT -approved removable media for use will aid in reducing opportunities and minimizing risks to <br />our information systems. <br />Staff has identified and are addressing a requirement for encryption on approved removable media. To further <br />enhance data security, the revised policy will now mandate encryption, when feasible, on all authorized USB <br />drives and external storage devices. To obtain compliance with this update, the IT Department will begin <br />utilizing software to enforce the Acceptable Use Policy and will provide centralized control over removable <br />media, prevent unauthorized access, and reduce the risk of data breaches. These measures align with <br />cybersecurity best practices and strengthen the County's data protection strategy. <br />BUDGETARYIMPACT <br />There is no funding requirement associated with the revision of this policy. <br />PREVIOUS BOARD ACTIONS <br />Indian River County, Florida Page 1 of 2 Printed on 4/17/2025 <br />powered by LegistarT", 62 <br />