Orange County NC Website
Browse       Search
Orange County Information Technologies Strategic Plan 20 <br /> Data Retention <br /> See "Data retention" for information on data backup and <br /> recovery. <br /> Security Initiatives <br /> Orange County IT needs to develop a comprehensive <br /> network security plan. While critical components are <br /> already in place, including: <br /> • Firewall protection against intruders and inappropriate <br /> use <br /> • Secure login policies with enforcement <br /> • Spam filtering <br /> • Email filtering of viruses <br /> • Desktop virus protection <br /> • Desktop controls and monitoring <br /> • Secure off-site storage of backup media <br /> • Server-level virus protection <br /> These components have been developed in ad hoc <br /> response to various emerging threats. The need for an <br /> overarching security plan is acute. <br /> Orange County IT must evolve its security policy which <br /> accommodates growth of applications, access and user <br /> needs, while anticipating the growing sophistication of <br /> threats. <br /> Disaster Recovery and Business Continuity <br /> While several initiatives have been undertaken to react to <br /> a variety of disasters (see section titled, Business <br /> • continuity on page 6), there is no comprehensive plan for <br /> ensuring critical technology systems are available during <br /> and after disasters. <br /> The IT organization must continue work with the <br /> Emergency Services department to: <br /> • conduct an audit of critical systems <br /> Page 19 of 25 2/9/2009 <br />