Orange County NC Website
Browse       Search
Orange County Information Technologies Strategic Plan <br />Data Retention <br />See "Data retention" for information on data backup and <br />recovery. <br />Security Initiatives <br />Orange County IT needs to develop a comprehensive <br />network security plan. While critical components are <br />already in place, including: <br />• Firewall protection against intruders and inappropriate <br />use <br />• Secure login policies with enforcement <br />• Spam filtering <br />• Email filtering of viruses <br />• Desktop virus protection <br />• Desktop controls and monitoring <br />• Secure off-site storage of backup media <br />• Server-level virus protection <br />These components have been developed in ad hoc <br />response to various emerging threats. The need for an <br />overarching security plan is acute. <br />Orange County IT must evolve its security policy which <br />accommodates growth of applications, access and user <br />needs, while anticipating the growing sophistication of <br />threats. <br />Disaster Recovery and Business Continuity <br />While several initiatives have been undertaken to react to <br />a variety of disasters (see section titled, Business <br />continuity on page 6), there is no comprehensive plan for <br />ensuring critical technology systems are available during <br />and after disasters. <br />The IT organization must continue work with the <br />Emergency Services department to: <br />• conduct an audit of critical systems <br />20 <br />Page 19 of 25 12/1/2008 <br />