Keeping Your Information Security Policy Up to Date in Local Government
Sang Oun Lee outlines how local election jurisdictions can update Information Security Policies (ISP) to protect critical municipal infrastructure.
Summary
The Dual Challenge of Local Government Cybersecurity
Local municipal governments provide essential civic services across sprawling administrative networks while operating under severe budget and staffing constraints.
The Foundation of Information Security Policies (ISPs)
Sang Oun Lee explains how an up-to-date Information Security Policy establishes mandatory administrative, operational, and technical controls across government agencies.
Adapting Policies to Modern Threat Environments
Lee reviews key policy domains requiring modernization—including remote work endpoints, third-party vendor management, cloud migrations, and incident response playbooks.
A Pragmatic Implementation Framework for Municipalities
The author provides local IT and security leads with a modular framework to assess current policy posture and achieve compliance with NIST and CIS standards.
Related talks
DCGVR Village·44 min
Allen Baranov
Allen Baranov explores how the hacker mindset can be applied to Governance, Risk, and Compliance (GRC) to improve security culture and risk assessments.
AUSCERT·40 min
Meena Wahi
2017 Day 1 Meena Wahi Managing Cyber Risk, Governance and Compliance.
Main Stage·1 hr 51 min
Jack Daniel
Jack Daniel details building on last year's panel discussion of PCI and its impact on the world of infosec, we are back for more- including "actionable" information.


