Orange County NC Website
112 <br /> ■ Multifactor authentication is used for user device access to network resources. <br /> ■ VPN and virtual desktop technologies are deployed for secure and managed remote access. <br /> ■ The principal of least privilege access is used for all uses both common and administrative. <br /> ■ Beyond the perimeter all network traffic is monitored north, south, east and west. Appropriate <br /> alerts are configured for anomalous behavior. <br /> ■ Network traffic is segmented to prevent the risk of cross contamination during security events. <br /> ■ Multiple security incident/information and event management strategies are used, i.e., SIEM <br /> technology to monitor server and device events. <br /> ■ File level access and permissions are systematically audited on access to comply with various <br /> compliance and standards requirements.. <br /> ■ Along with typical nightly, weekly and monthly backups routines, data is sent off site and <br /> database data is stored immutably in the cloud. <br /> ■ Next Generation end point detection and response is deployed across the enterprise with <br /> dedicated third-party staff reviewing incidents as they occur, 24 hours per day, 365 days per <br /> year. <br /> Orange County Information Technologies' multi-layered approach includes mandatory security <br /> training for all employees that access the network as well as having an IT Security Officer to review and <br /> create appropriate security policies and procedures. <br /> PENSION PLANS <br /> The County participates in the North Carolina Local Governmental Employees'Retirement System <br /> (the "LGERS"). The North Carolina Local Governmental Employees' Retirement System is a service <br /> agency administered through a board of trustees(the"Board of Trustees")by the State for public employees <br /> of counties,cities,boards,commissions and other similar governmental entities. While the State Treasurer <br /> is the custodian of system funds,administrative costs are borne by the participating employer governmental <br /> entities. The State makes no contributions to the system. <br /> The system provides, on a uniform system-wide basis, retirement and, at each employer's option, <br /> death benefits from contributions made by employers and employees. Employee members contribute six <br /> percent of their individual compensation. Each new employer makes a normal contribution plus, where <br /> applicable,a contribution to fund any accrued liability over a 24-year period. The normal contribution rate, <br /> uniform for all employers for fiscal year 2022-23, was 12.14% of eligible payroll for general employees <br /> and 13.24% of eligible payroll for law enforcement officers ("LEO"). The normal contribution rate, <br /> uniform for all employers for fiscal year 2023-24, is 12.89%of eligible payroll for general employees and <br /> 14.04% of eligible payroll for LEOs. The accrued liability contribution rate is determined separately for <br /> each employer and covers the liability of the employer for benefits based on employees' service rendered <br /> prior to the date the employer joins the system. Additional rates,such as rates associated with death benefits <br /> or past service liabilities,will be added to the base rate to determine the actual contribution percentage for <br /> each employer. <br /> 40 <br />