HomeMy WebLinkAbout24-2636Docusign Envelope ID: B67B5DBA-020DJ+9EB-BB02-6C94CD896AED
RESOLUTION NO. 24-2636
A RESOLUTION OF THE CITY OF DENTON ESTABLISHING POLICY “INCIDENT
RESPONSE” FOR A PROACTIVE FRAMEWORK FOR IDENTIFYING, MANAGING, AND
MITIGATING CYBERSECURITY INCIDENTS, SAFEGUARDING THE ORGANIZATION’S
INFORMATION ASSETS, AND ENSURING SEAMLESS BUSINESS CONTINUITY; AND
DECLAR[NG AN EFFECTIVE DATE.
WHEREAS, Administrative Directive “Incident Response” (Directive) was approved by
the Policy Review Committee November 18, 2024; and
WHEREAS, the City of Denton “Incident Response” Policy will be in compliance with the
National Institute of Standards and Technology (NIST) Specialist Publication (SP):
• NIST SP 800-53a – Incident Response (IR)
• NISTSP800-16
• NIST SP 800-50
•
•
•
•
NIST SP 800-6 1
NIST SP 800-84
NIST SP 800-115
Incident Response; and
WHEREAS, staff desires to elevate the Directive to a policy of the City; and
WHEREAS, the City Manager recommends adoption of a Incident Response policy and
the City Council desires to adopt such policy; NOW, THEREFORE,
THE COUNCIL OF THE CITY OF DENTON HEREBY RESOLVES:
SECTION 1. The Policy Statement in “incident Response”, which is incorporated in this
section, is hereby adopted as an official policy of the City of Denton:
POLICY PURPOSE STATEMENT
To ensure our commitment to quality service and strategic focus this policy aims to establish a
proactive framework for identib'ing. managing. and mitigating cybersecurity incidents,
safeguarding the organization’s information assets, and ensuring seamless business continuity.
This policy empowers the Information Technology (IT) department to effectively identify, contain.
investigate, remedy, report, and respond to computer security incidents, minimizing potential
damage and fosterIng a secure environment for aU numbers of the organization (“users”),
POLICY
This policy is applicable to all departments and users of IF resources and assets.
SECTION 2. This resolution only adopts and approves the “Policy Statement” portion of the
Incident Response policy as set forth above. The remaining portion of the Incident Response policy
is an administrative procedure describing the means and methods by which City management
Docusign Envelope ID: B67B5DBA-020D-49EB-BB02-6C94CD896AED
implements the Policy Statement. The City Manager is authorized to amend and issue such
administrative procedures and directives as deemed necessary to implement the Policy related to
personnel and internal operational matters.
SECTION 3. The attached policy shall be filed in the official records with the City
Secretary.
SECTION 4. This resolution shall become effective immediately upon its passage and
approval.
The motion to approve this resolution was made by Brian Beck and seconded by Brandon Chase
McGee.
The resolution was passed and approved by the following vote [ 7 – 0 – J :
Aye Nay Abstain Absent
Mayor Gerard Hudspeth: I
Vicki Byrd, District 1 : X
Brian Beck, District 2: X
Paul Meltzer, District 3 : X
Joe Holland, District 4: X
Brandon Chase McGee, At Large Place 5 : X
Jill Jester, At Large Place 6: 1
PASSED AND APPROVED this the 4th day of February, 2025 .
Rsm[MIx–ol
ATTEST:
LAUREN THODEN, CITY SECRETARY
M@LJMJk
APPROVED AS TO LEGAL FORM:
MACK REINWAND, CITY ATTORNEY
BY:
L\\\\llllllffON
Docusign Envelope ID: B67B5DBA-020D-49EB-BB02-6C94CD896AED