Skip to content

Keeping Your Information Security Policy Up to Date in Local Government

Sang Oun Lee

Sang Oun Lee outlines how local election jurisdictions can update Information Security Policies (ISP) to protect critical municipal infrastructure.

Summary

The Dual Challenge of Local Government Cybersecurity

Local municipal governments provide essential civic services across sprawling administrative networks while operating under severe budget and staffing constraints.

The Foundation of Information Security Policies (ISPs)

Sang Oun Lee explains how an up-to-date Information Security Policy establishes mandatory administrative, operational, and technical controls across government agencies.

Adapting Policies to Modern Threat Environments

Lee reviews key policy domains requiring modernization—including remote work endpoints, third-party vendor management, cloud migrations, and incident response playbooks.

A Pragmatic Implementation Framework for Municipalities

The author provides local IT and security leads with a modular framework to assess current policy posture and achieve compliance with NIST and CIS standards.

Related talks

DCGVR Village·44 min

  • DEF CON
  • Policy
  • Date: Aug 2023
  • Location: Las Vegas

Allen Baranov

Allen Baranov explores how the hacker mindset can be applied to Governance, Risk, and Compliance (GRC) to improve security culture and risk assessments.

grccompliancerisk-management+2