Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the It Policy Adoption topic
No spam. Unsubscribe anytime.
Waukesha City IT Board reapproves five IT policies, directs staff to align with CIS controls
Summary
The Waukesha City Information Technology Board unanimously reapproved five existing IT policies on Feb. 5, 2025, and instructed staff to map policy language and procedures to the Center for Internet Security(CIS) 18 controls beginning in March.
The Waukesha City Information Technology Board on Feb. 5 unanimously reapproved five existing IT policies and asked staff to begin aligning them with the Center for Internet Security (CIS) Community Defense Model.
"I will make a motion to approve the IT policies that are attached," the Chair said before the board voted to approve the five policies — listed in the meeting record as PCI DSS, the antivirus policy, the B-20 software usage/acceptable use policy, the change management policy and the email policy. The motion was seconded and passed unanimously.
Staff explained the alignment plan to the board. Greg Viness, the IT staff representative, read a message from Chris describing CIS's 18 controls and said the city plans to "align all of our IT policies, cyber processes, and procedures to IG 1 and then IG 2," starting in March to formalize existing practices and prioritize steps that support regulatory compliance.
Board members and staff agreed the approval kept current policy language in place while allowing staff to return with edits and gap-fill work over the coming months. The board recorded no objections and closed the item after the unanimous vote. The board will receive revised policy drafts as staff map existing governance and operational documents to the CIS framework.
