Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Sunset City adopts government vulnerability disclosure policy and posts new .gov website contact
Summary
Council approved a vulnerability disclosure policy to comply with recent state privacy legislation and directed staff to publish reporting details and an email contact on the city website (sunsetut.gov).
The Sunset City Council voted April 1 to approve a government vulnerability disclosure policy and to publish reporting information for security researchers and citizens on the city website.
Office staff said the policy implements requirements from recent legislation and will provide a single email address monitored by the city for reporting website security vulnerabilities. The city also confirmed it moved the municipal website from a commercial domain to the government domain sunsetut.gov; staff said they will monitor incoming vulnerability reports sent to the address listed in the policy.
Why it matters: Vulnerability disclosure policies provide a formal channel for researchers and citizens to report security problems on public websites or systems. Council members said adopting the policy increases transparency and helps manage cybersecurity risk for city services.
Council action: The councilmember motioned to approve the Sunset City government vulnerability disclosure policy; a second was offered by Council member Ridley and the motion passed with no objections recorded on the meeting audio. The policy text and contact email will be posted to the new city website. The city’s office manager said she will monitor the report email account and work with IT as needed to respond to incoming vulnerability reports.
Practical details: Staff told the council the website now uses the domain sunsetut.gov and that emails for staff follow the pattern firstinitiallastname@sunsetut.gov. Council members asked staff to check how long any redirects from the old .com domain would remain in place.
Ending: The policy will be posted on the city website and staff will follow the procedures described in the document for triage and response to reported vulnerabilities.
