Town adopts breach-response, cyber-defense and data-security policies

The Town of Constable approved a suite of policies aimed at protecting information and responding to data incidents. The Breach Response and Notification Policy assigns the Town Supervisor as Principal Privacy Officer, establishes an incident response team with forensic procedures and sets notification and communication plans for affected employees and the public. The board accepted the policy on a motion by Councilman Clyde Wilson, seconded by Councilwoman Lemire.

The board also adopted a Cyber Security Defense Policy that requires Advanced Endpoint Protection and ACE appliances on endpoints and the network, regular scans and employee reminders. Separately, the Data Security Policy sets rules for handling Non-Public Information and Personally Identifiable Information, defines categories of authorized personnel and enumerates security and retention requirements. Each policy was accepted by motions recorded in the minutes and is now in effect.