HomeMy WebLinkAbout20050819.tiff Minutes
WELD COUNTY COUNCIL
October 18, 2005
Tape 10A2005 & 10B2005
The Weld County Council met in regular session in full conformity with the Weld County
Home Rule Charter, Tuesday, October 18, 2005, 6:30 p.m., at Weld County Centennial
Center, 915 10th Street, Greeley, CO.
ROLL CALL: The meeting was called to order by Vice President Dwaine Kurtz.
Councilwoman Ginny Buczek, Councilman Tom Pettit, and Councilman Gene Still were
present constituting a quorum of the members. President Chip Marks was excused. Also
present: ACS Account Manager Anita Scrams, and Bev Thomas, council secretary.
AGENDA ADDITIONS/APPROVAL: The printed agenda was approved by consent.
REVIEW PROGRAM:
Ms. Anita Scrams, Weld County's Executive Account Manager since 2003 for Affiliated
Computer Services (ACS), presented a review program. ACS is an international
information technology services company based in Texas, and is providing services to
several Colorado government agencies. Ms. Scrams reviewed the modifications made to
ensure that the information technology environment in Weld County is secure from
unauthorized use following Weld County's information technology system being breached
by a jail inmate in October 2004. These modifications have been taken to ensure that
confidentiality, integrity, and availability of Weld's technology information is maintained
according to Ms. Scrams.
The Inmate Pod Systems (LAN) has been physically removed and isolated from the
general county network. The LAN contains a read-only CD jukebox where WestLaw
information can reside and be updated. This system provides only the minimum
applications required by law which are a word processing program for typing notes and
access to WestLaw CDs for legal research. It includes no printing and no external
connection via the network, modem, dial-out capabilities, or the Internet. Each prisoner
works from a clean drive and no data can be saved from session to session.
Public Access Systems: All public access and non-county owned systems that are
connected to the network have been placed outside of the main county network. All
connections are read-only and are processed through a firewall and logged. The firewall
has been configured to permit public access systems access to the minimum servers,
systems, and Internet sites necessary to accomplish the necessary public function. The
system is monitored with intrusion detection systems.
Covvun tit ce.hev,s
11-21 -OS < O025-- O8/7
Weld County Council Minutes
October 18,2005
Page 2 of 4
Account Policies: Every network user has a unique user ID and password. This includes
vendors, contractors, interns, volunteers, temporary staff, etc., as well as all Weld County
employees.
Physical Security of the hardware and network systems is maintained at all critical areas
such as the computer rooms and wiring closets. All ID badges are issued only by Weld
County, and security cameras and environmental monitoring devices have been installed.
Vulnerability Assessment and Remediation was conducted by a third party independent of
Weld County and ACS employees. Monthly vulnerability scans are run on all external IP
addresses and at all critical internal servers by an independent third party, Critical Watch.
An annual penetration test and site security audit will be conducted also by an
independent third party.
WebSense Maintenance and Auditing has been turned on and monitored to track logon,
reads and writes. The WebSense logs are reviewed on a daily basis. Relevant entries
are reported to ACS management on a daily basis. Full reports are generated monthly
and distributed to the governance committee made up of five Weld County department
heads, Mr. Don Warden, and ACS resource personnel.
Security and Event Log Aggregation: All network devices, IDS systems, and firewalls are
configured to send log events to a syslog server. The log files are reviewed for intrusion
attempts and anomalous activity on a daily basis by the network administrator and
significant events are forwarded to the security manager who is located in Carrollton, TX
and travels here as needed. He has remote access to Weld's network, and also
manages security for Adams County, CO.
Global Network Recommendations and Security Administration: Intrusion detection
devices were already configured to monitor the DMZ networks as well as each of the
ingress/egress points to outside networks. Additionally, they have been configured to
monitor critical switching points of the internal network to detect inappropriate activity.
The Intrusion Detection System (IDS) has been reconfigured to be monitored 24/7
remotely by the ACS security group in Dallas, TX. A security administrator position,
whose primary responsibility is to monitor and manage security for the network and for
Weld County computer systems, has been created and filled. All external/extranet/vendor
network connections have been protected with a locally managed firewall. The network is
regularly scanned for rogue wireless networks. ACS is in the process of ensuring that all
approved wireless networks are secured to require authentication and strong encryption.
Policies and Procedures regarding the information technology system, the
hardware/software and use restrictions, account access, etc have been recommended for
approval by the Weld County Board of Commissioners and have been implemented or
are under consideration by the Board of County Commissioners. Access to each
Weld County Council Minutes
October 16,2005
Page 3 of 4
category of information will be restricted to those whose duties require access.
Employees will receive training in regards to the classification of sensitive information.
Ms. Anita Scrams also gave council members further information regarding monitoring,
authentication, installation of Cisco Works , and network user account terminations. The
Council expressed concern that notification of network user account terminations only
occurred on Fridays because a disgruntled employee could do damage to the system
between his termination date and the Friday of the same week. Ms. Scrams said she
would pursue a same-day termination of system usage policy for "terminated with cause"
employees.
APPROVAL OF DOCUMENTATION:
September Council Minutes
Councilman Tom Pettit made a motion to approve the September 20, 2005 council
minutes. The motion was seconded and carried.
2006 Third Quarter Report to the People
Councilman Gene Stille made a motion to adopt the 2006 third quarter Report to the
People. The motion was seconded and carried.
UNFINISHED BUSINESS:
Possible Amendments to the Weld County Home Rule Charter
Councilman Gene Stille made a motion to request the county attorney prepare a ballot
question for a future election amending the Weld County Home Rule Charter so the
number of signatures required to run for Weld County Council be thirty-five. The motion
was seconded and carried.
NEW BUSINESS:
Appointments and Announcements
Council persons Buczek, Pettit and Stille will attend the Town/County meeting October
24. Councilmen Pettit and Stille will attend the November 7 ACS briefing.
Letter RE: Possible Appearance of Conflict of Interest
Vice President Dwaine Kurtz appointed Councilman Gene Stille to review the possible-
appearance of a conflict letter received from Weld County employee Pam Smith.
Councilman Stille will provide the Council with a resolution regarding Ms. Smith's letter for
the Council to adopt at the November council meeting.
Meeting Day for 2006 Weld County Council Meetings
Weld County Council Minutes
October 18,2005
Page 4 of 4
Council members are considering setting the 2006 Weld County Council meetings on the
third Monday of each month except February when the Council would meet on the
second Monday.
2005 November Council Review Programs
Vice President Dwaine Kurtz will contact Dr. Wallace to provide a review program from
one of his departments at the November 2005 Weld County Council meeting.
Correspondence
Council members reviewed the correspondence.
Coordinator Reports
Councilwoman Ginny Buczek reported on the September 22, 2005 Energy Summit held in
Greeley, CO.
Payment of the Bills
Councilman Gene Stille made a motion to pay the bills as listed:
Mileage for Ginny Buczek $51.84
Mileage for Councilman Chip Marks $34.02
Mileage for Councilman Tom Pettit $18.03
Mileage for Councilman Gene Stille $15.39
Invoice from Nelson's Office Supplies $88.05
The motion was seconded and carried.
CLOSING REMARKS:
ADJOURNMENT: The meeting was adjourned at 8:35 p.m.
November 15, 2005 Q2/,:j1‘O ,
Date Approved Dwaine Ku uncil Vice President
�7 fly .
Beverly Thomas, Council Secretary
Hello