Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Internal Policies topic
No spam. Unsubscribe anytime.
County OIT defends policy limiting use of "all-users" email list after social-media criticism
Summary
Rutherford County OIT staff defended a policy limiting who can post to the county’s all-users email list, citing standard 'least-privilege' cybersecurity practice and saying the restriction predates the current administration; commissioners approved a temporary suspension of rules to allow the explanation.
The Rutherford County steering committee heard an explanation from the county’s information-technology office after social-media posts accused county officials of withholding access to the county-wide 'all-users' email list.
The committee voted to suspend rules and allowed Cody York to respond. York said the all-users list reaches roughly "13,000 1320 something" users (as he stated in the meeting) and that the county follows a least-privilege access principle: posting rights are limited to staff with a business need, such as human resources, risk management/insurance, the county mayor’s office (for administrative closings), certain OIT staff and the county public-information officer.
York said the list had been widely available historically, which led to non-business posts, and that about seven years ago he restricted use to business purposes and limited senders. He told the committee, "I was the one that made it. I did not...was not told by any mayor...to do it that way," and said both mayors he served under had supported his security decisions.
Committee members asked how elected officials should request use of the list and whether the county PIO or the mayor’s office must sign off. York said external communications should go through the county PIO, which may defer to the mayor on political or high-profile items, and reiterated that the all-users list is intended for business use only.
York also described why the county responded publicly to the criticism: he said attacks on staff were unfair and, if unanswered, could lead others to assume the allegations were true. The committee took no formal action beyond permitting York to explain the record and the existing policy.
What comes next: no formal policy change was recorded in the meeting; commissioners indicated they understood the explanation and asked that the PIO/administration clarify procedures for elected officials who seek use of the list.
