Security and Networking Coordinating Committee Charge:

The Security and Networking Coordinating Committee is given the charge of identifying, reviewing, evaluating and recommending the approach that the BOR will use in implementing and managing the various layers of IT security and networking for the system. This committee will make recommendations to TAC on policy, procedures, standards, guidelines and purchases for BOR security and networks.

Process:

The group will monitor IT security and networking issues that arise in the BOR, regional and national networks. These include security alerts provided by recognized organizations such as CERT and SANS, proposed legislation such as CALEA, new technologies which help support the IT security and networking infrastructure of the BOR networks, video conferencing, bandwidth and network utilization, intrusion detection and prevention, remote access to BOR networks and data, and new networking initiatives such as high speed optical networks and voice over IP. This group exchanges information with each other and acts as a resource to its members regarding IT security and networking issues. When new technologies become available which support the IT security and networking goals of the BOR this group will evaluate the technologies and make recommendations regarding the purchase and update of existing infrastructure. The group will prepare recommendations on IT security and networking issues presented to it by the various BOR committees. This group will conduct training sessions as necessary to improve their effectiveness. Where practical the group will recommend group purchases to take advantage of discounted pricing and other incentives such as discounted training and complimentary products. The group will interact with other state agencies such as BIT as needed.

Key Goals:

• Identify and recommend policy, procedures and equipment needed in the area of IT security and networking to strengthen the approach adopted by the BOR for preventing unauthorized access to data and resources managed by the BOR;
• Identify and recommend policy, procedure and equipment needed in the area of IT security and networking to comply with new and existing regulations;
• Identify and recommend budgets for 5 year planning and prepare budget requests to coincide with the BOR requests in April;
• Identify and recommend IT Security and networking standards to be adopted by the BOR to support goals the above goals.

Meetings and Reporting:

• The Security and Networking Coordinating Committee should meet monthly via teleconference;
• Provide written status report to TAC at regularly scheduled TAC meetings.