Town Home
131 Cedar Street - Newington, CT 06111-2644 - Phone: (860) 594-6256
Town of Newington - Information Technology Policies

Title:

Purpose:

Acceptable Use Policy

To establish an Acceptable Use policy that outlines the appropriate use of communications equipment (data/ voice) owned by the Town of Newington (hereinafter "Town") and to establish guidelines and procedures with regards to use of the Town’s communication networks.

Acquisition Policy

To provide guidelines and detail responsibilities regarding acquisitions for Town of Newington (hereinafter, "Town") technology equipment, grant purchased equipment, private purchased equipment or donated equipment (hereinafter, "IST Equipment").

Analog/ISDN Line Security Policy

To establish the Town of Newington’s (hereinafter "Town") analog and ISDN line acceptable use and approval policies and procedures. This policy covers two distinct uses of analog/ISDN lines: lines that are to be connected for the sole purpose of fax sending and receiving, and lines that are to be connected to computers. This policy covers only those lines that are to be connected to a point inside the Town’s building(s) and testing sites. It does not pertain to ISDN/phone lines that are connected into employee homes, PBX desktop phones, and those lines used by Telecom for emergency and non-Town information purposes.

Antivirus Policy

To establish an Anti-Virus Policy which must be met by all computer equipment connected to the Town of Newington’s (hereinafter "Town") communication networks to ensure effective virus detection and prevention.

Audit Policy

To provide the authority for the Town of Newington's Director of Information Systems and Technology (hereinafter, "IST") and/or his/ her duly authorized designee(s) to conduct a security audit on any system at the Town of Newington (hereinafter, "Town") or any of its properties.

Community Calendar Policy

To establish (a) guidelines for publication of events and activities sponsored by outside organizations on the Community Calendar of the Town of Newington’s (hereinafter "Town") web site; and (b) standards for acceptance and publications of events and activities conducted by organizations which are not directly associated with or sponsored by the Town, its departments or agencies.

Dial-in Access Policy

To protect the Town of Newington’s (hereinafter Town) electronic information from being inadvertently compromised by authorized personnel using dial-in/broad band connections.

Streaming Media & Downloads

To establish guidelines pertaining to the acceptable use of streaming media and to clarify the type and nature of files that may be downloaded from third-party sources onto the Town of Newington’s (hereinafter, "Town") communication networks (including but not limited to desktop computers, servers, laptop computers, Pocket PCs, Tablet PCs).

Email Policy

To establish an Electronic Mail (Email) Policy that outlines the appropriate use of Town of Newington (hereinafter "Town") email systems in order to prevent tarnishing the public image of the Town. When email is sent from the Town, the general public will tend to view that message(s) as an official policy statement from the Town.

Password Policy

To establish a standard(s) for creation of strong passwords and/ or pass phrases, the protection of those passwords/pass phrases, and the frequency of change. Passwords and/ or pass phrases are an important aspect of the Town of Newington’s (hereinafter "Town") communication networks security. They are the front line of protection for user & system accounts. A poorly chosen password/pass phrase may result in the compromise of the Town’s entire communication networks. As such, all Town employees (including contractors and vendors with access to the Town’s communication networks) are responsible for taking the appropriate steps, as outlined below, to select and secure their passwords/pass phrases.

Remote Access Policy

To define standards for connecting to the Town of Newington’s (hereinafter "Town") communication networks from any host. These standards are designed to minimize the potential exposure to the Town from damages which may result from unauthorized use of the Town’s resources. Damages include the loss of sensitive or Town confidential data, intellectual property, damage to public image, damage to critical Town internal systems, etc.

Risk Assessment Policy

To authorize the Town of Newington’s (hereinafter, "Town") Director Information Systems and Technology and/or his/her authorized designee to perform periodic information security risk assessments (hereinafter, "RA") for the purpose of determining areas of vulnerability, and to initiate appropriate remediation.

Virtual Private Network (VPN) Policy

To provide guidelines for Remote Access IPSec or L2TP Virtual Private Network (VPN) connections to the Town of Newington’s (hereinafter Town) communication networks.

Web Site Policy

To establish (a) guidelines for the administration standard(s) for creation of web content for the Town’s web site and use of the Town of Newington’s (hereinafter "Town") web site by the Town’s Information Systems and Technology (hereinafter, "IST") staff "webmasters" and designated department employees serving as "web page maintainers"; (b) standard(s) for creation of web content for the Town’s web site; and (c)to establish accountability for published content.