1. IT POLICY SYSTEM DEVELOPMENT AND DEPLOYMENT Case Study: Kaon Security Ltd and Nillumbik Shire Council

2. WHO ARE WE? KAON SECURITY LTD  Formed in 2004  Specialise in IT Policy Development, IT Auditing and Consulting  Over 50 IT Policy Customers in both NZ and Australia  Better known for our role in helping Ballarat City Council and Golden Plains Shire Council manage the 2010 security breach

3. POLICY  Needs to be accessible to all  Appropriate to the organisation  Reviewed regularly  Meet organisational regulatory compliance and legislative requirements  Policy defines the “What” and “Who”  Procedure defines the “How”  Critical to managing your IT environment

4. INFORMATION SYSTEMS SECURITY CYCLE

5. WHY OUTSOURCE?  Policy development is time consuming  Low on the priority “to do” list  Hard to get started with a blank canvas  Writing Policy is not exciting, its not cool and its not going to make you popular with the user community  IT doesn’t want to appear as the “IT Police”  The IT - HR disconnect  Regulatory compliance adds complexity  Auditors and Risk Managers requirements

6. POLICY An example of good policy documentation Nillumbik Shire Council Information and Technology Policy System (Note: These slides are a partial extract from the system)

16. NILLUMBIK SHIRE COUNCIL How We Got There Trish Spiteri

17. NILLUMBIK SHIRE COUNCIL The Process with Kaon Security  Questionnaire completed  First draft prepared  Onsite review conducted over 2 days  Final version received  Maintenance to allow further changes anytime  Implementation guidelines provided

18. NILLUMBIK SHIRE COUNCIL Benefits  Cost effective and saves time  Simple process that delivers an end result  Review process identifies gaps between policy and practice  Links policy, procedure and other documents  Easy to deploy  No training required for users  IT Policies accessible to all  Consistent rules and guidelines across Council  Maintenance options to keep up to date  Big tick from Auditors

19. THE END Contacts Kaon Security Ltd – www.kaonsecurity.comwww.kaonsecurity.com Jackie Krzyzewski - jackiek@kaon.co.nzjackiek@kaon.co.nz Nillumbik Shire Council Trish Spiteri – Trish.Spiteri@nillumbik.vic.gov.auTrish.Spiteri@nillumbik.vic.gov.au