County reviews acceptable-use policy; commissioners flag USB and mobile-device rules

The board reviewed a draft acceptable-use policy for county IT systems and raised questions about several operational controls. Commissioners asked whether the draft addressed removable-media devices (USB/zip drives), how the county would handle external drives plugged into county systems, and whether mobile devices that access county email are required to have PINs or similar protections. One commissioner volunteered to work with IT and Jody to resolve specific items and asked that any additional language be submitted before next Wednesday so revisions can be incorporated.

"I didn't see anything in there to control use of zip drives or similar items," a commissioner said, citing a malware risk. Staff noted the county's virus scanning systems may automatically scan removable media and that IT could confirm whether additional policy language or technical controls are necessary. The board asked IT and department heads to propose precise policy language (shall/should/require) so the board can review a redlined draft before making a motion.