Camden County presents updated acceptable-use policy; no vote taken

Miko McGovern, the county's security and compliance officer, introduced a 44-page update to Camden County's acceptable use policy (AUP) and said the purpose of the session was to socialize changes, gather feedback and return with a final version at a subsequent meeting. "No decisions or approvals are being requested this evening and we will also have a video about the acceptable use policy to help just kind of speedrun through it," McGovern said.

The proposed AUP is framed as an update to the county's 2019 policy that aligns with cybersecurity frameworks and responds to new operational realities. McGovern told commissioners the update addresses use of devices, network access, email, cloud services and rising risks such as use of public AI tools and uploading county documents to personal cloud services. The presentation noted alignment to NIST CSF 2.0 and other controls; McGovern credited an internal video produced by IT intern Sophia Harlos to support the rollout.

Commissioners asked whether the policy applies to all county government, including constitutional officers and court employees. McGovern said the policy applies to county information-technology systems and accounts and that the document contains a caveat about some elected officials: "there is on the very first page a caveat that talks about some elected officials, constitutional officers," she said. On enforcement and monitoring she said the rollout combines user guidance with active monitoring: "there is also an element behind the scenes where I'm making sure everything is going the way it should be."

McGovern emphasized that staff are not seeking an immediate vote and asked the board to review the materials before the next meeting. The board did not take action; staff will bring the revised AUP back for formal consideration at a future meeting.