Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Madison County adopts updated information security policy to meet CJIS and industry standards
Summary
Madison County Fiscal Court approved an updated information security policy (Resolution 2026‑029) to replace the county's 2016 policy; the update aligns local practice with CJIS, NIST standards and cybersecurity insurance requirements and includes new password and access controls.
Madison County Fiscal Court adopted Resolution 2026‑029 on April 28, replacing the county’s prior information technology policies with a comprehensive, standards‑based information security policy.
Chris (department head) told the court the 113‑page policy aligns with nationally recognized frameworks including CJIS and NIST and is intended to safeguard criminal justice information and other sensitive county data. He described requirements such as background checks for personnel who access the dispatch/data center, escorted access for vendors, annual certifications for staff, 365‑day log retention, and automated alerts for account lockouts.
Chris framed the update as essential both for compliance and to secure the county’s eligibility for cybersecurity insurance. “It’s a tremendous amount of work to secure under the CJIS protocols,” he said, adding that the county had not updated its policy since 2016 and that the stricter standards will better protect residents’ criminal justice and personal information.
Council members asked questions about implementation and the policy’s length; Chris said he removed ambiguous language such as “regularly” from sections on log review and is working with staff to roll out the banned‑password list and other operational changes. He noted that some employees will need assistance adopting the new controls but said the county’s systems now notify administrators when repeated login failures occur.
After discussion the court moved, seconded and approved the resolution by roll call. The judge or his designee was authorized to execute the policy documentation as needed.
