Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
State security engineer briefs Legislative Post Audit Committee on mandated ITEC 7230 training
Summary
Bob Murphy, security engineer for Legislative Administrative Services, summarized state-required ITEC 7230 cybersecurity and privacy practices for committee members, stressing 14-character passwords, data classification rules, device restrictions and procedures for reporting suspected breaches.
Bob Murphy, security engineer for Legislative Administrative Services, reviewed the state-mandated ITEC 7230 security and awareness training for 2025 during a premeeting briefing to the Legislative Post Audit Committee.
Murphy said the training covers passwords, privacy and data handling, physical security, common cyberattacks and acceptable use of state information systems. "A 14-character password with a mix of letters, numbers, and symbols will take a brute force attack piece of software about 16000000 years to crack," he told the committee to illustrate the agency's password standard.
The training outlined three Kansas data classifications in iTech policy: public, private and restricted. Murphy said restricted and private information must be encrypted when stored locally or on agency-approved portable media, encrypted when transmitted electronically…
Already have an account? Log in
Subscribe to keep reading
Unlock the rest of this article — and every article on Citizen Portal.
- Unlimited articles
- AI-powered breakdowns of topics, speakers, decisions, and budgets
- Instant alerts when your location has a new meeting
- Follow topics and more locations
- 1,000 AI Insights / month, plus AI Chat
