MEETING OF COUNCIL - Town of Cambridge
MEETING OF COUNCIL - Town of Cambridge
MEETING OF COUNCIL - Town of Cambridge
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
<strong>COUNCIL</strong> MINUTES<br />
TUESDAY 27 NOVEMBER 2012<br />
project has been deferred. It is planned to include the project in the 2013/14 financial<br />
year budget.<br />
6. Logging and investigation <strong>of</strong> unsuccessful login attempts:<br />
No log records are maintained <strong>of</strong> unsuccessful attempts to login into the <strong>Town</strong>’s<br />
network in order that such attempts are able to be investigated. The <strong>Town</strong> is currently<br />
exposed to the risk <strong>of</strong> continued unauthorised access attempts.<br />
Management Comment<br />
Failed attempts will now be collated where the account is locked out after three<br />
unsuccessful logon attempts. This will be reviewed and reported on a regular monthly<br />
basis.<br />
7. Disaster Recovery and Business Continuity Plans:<br />
A Disaster Recovery Plan exists but the plan has not been subjected to full testing.<br />
Further the <strong>Town</strong>’s operations including the out centres and the Wembley Golf Course<br />
does not have Business Continuity Plans in place, which set out how the <strong>Town</strong> and its<br />
out centre operational/service areas will continue operating and providing vital services<br />
in case <strong>of</strong> an unforeseen event.<br />
Management Comment<br />
As part <strong>of</strong> the 2012/13 I.T Projects Work Plan, technical testing <strong>of</strong> the I.T Disaster<br />
Recovery Plan is scheduled between April and June 2013<br />
Business Continuity plans should be developed for each individual business area by<br />
their respective Manager as part <strong>of</strong> the <strong>Town</strong>s disaster risk assessment and the<br />
associated mitigation strategies. This is a function <strong>of</strong> the <strong>Town</strong>'s Governance area as<br />
part <strong>of</strong> Organisational Risk Management (a project which has yet to gain some<br />
traction).<br />
I.T may be required to provide interim I.T based solutions to facilitate Business<br />
Continuity until full I.T services are available as part <strong>of</strong> the ITDRP. These interim<br />
solutions need to be identified by the business and developed by I.T in advance and<br />
documented in the Business Continuity plan.<br />
Once completed, Business Continuity plans will be aligned with the recovery time<br />
frames outlined in the ITDRP.<br />
8. Service Agreement with Clublinks:<br />
The <strong>Town</strong> is not provided with any formal assurances from Clublinks that data is being<br />
kept secure and that all data is being adequately backed up and can be retrieved<br />
should the need arise.<br />
Management Comment<br />
Clublinks will be requested as part <strong>of</strong> the <strong>Town</strong>'s financial year end process to provide<br />
written (audited) confirmation that data is secure and being regularly backed up.<br />
H:\CEO\GOV\<strong>COUNCIL</strong> MINUTES\12 MINUTES\NOVEMBER 2012\D AU.DOCX 210