Laserfiche WebLink
CITY OF PLEASANTON – INFORMATION TECHNOLOGY DEPARTMENT v2.5 <br />INFORMATION TECHNOLOGY – 3 RD PARTY ACCESS <br />1.0 Purpose <br />This policy establishes the framework for contractors to access the City of Pleasanton's <br />electronic resources and data remotely, aiming to safeguard data integrity and security while <br />minimizing exposure to external threats and data loss risks. It delineates the standards, <br />procedures, and restrictions governing such access, ensuring that remote engagements comply <br />with the city’s stringent security protocols. The goal is to maintain data confidentiality, integrity, <br />and availability, even when accessed beyond the city’s physical office boundaries, by <br />implementing best practices in data protection and access control. <br />2.0 Scope <br />This policy encompasses all external entities, including contractors, consultants, partners, and <br />others, collectively termed "ITSC," who remotely access the City of Pleasanton's network, <br />systems, or data. Remote access includes connections from any off-site location, such as <br />homes, hotels, airports, cafés, satellite offices, and through any personal or corporate device. <br />This broad definition ensures comprehensive coverage, safeguarding the city's digital <br />infrastructure against unauthorized access or breaches, irrespective of the remote access point. <br />3.0 Definitions <br />•COP: City of Pleasanton <br />•ITD: Information Technology Department <br />•ITSC: Information Technology Support Contractors <br />•VPN: Virtual Private Network – Programming that creates a safe and encrypted <br />connection over a less secure network such as the public Internet. <br />•MFA: Multi-Factor Authentication <br />•E2EE: End-to-End Encryption <br />•Data Breach: unauthorized access to or disclosure of sensitive information <br />•BYOD: Bring Your Own Device – personal devices used for work. <br />•Phishing: A method of fraudulently attempting to obtain sensitive information. <br />•RDP: Remote Desktop Protocol – common method for remote access <br />•SSH: Secure Shell or Secure Socket Shell: a network protocol that gives users, <br />particularly system administrators, a secure way to access a computer over an unsecured <br />network. <br />Docusign Envelope ID: 4B3DD47E-7332-8163-807C-64B627C64358