Solution:
Comprehensive Security Technical Office
Girona Town Hall
Information Systems Security Office Services
The Girona City Council is a local institution whose function is the government and administration of the interests of the residents of the municipality of Girona.
Citizens trust that the services available through electronic (telematic) means are provided under security conditions equivalent to those presented in person. The information and services offered are subject to threats and risks arising from illicit or malicious actions, errors or failures and / or accidents or disasters. Law 11/2007, of June 22, on electronic access of citizens to Public Services, establishes the principles and rights of citizens to communicate with Public Administrations by electronic means, creating the National Security (ENS).
Their need
For this reason, the Girona City Council had to define the functions of the Information Security Office in accordance with a security framework that took into account organizational, technical and legal measures.
The Office had to adapt and improve security policies to new and future needs in order to ensure the authenticity, confidentiality, integrity, availability and traceability of its information.
Our solution
NexTReT, as a specialist in IT sector solutions, presented its proposal for the definition and implementation of the Information Security Management System (ISMS) that through policies, physical and logical security procedures, review tasks and monitoring of continuously that guarantee the information security requirements.
The implementation of the ISMS materialized in an audit and advisory service to the Information Security Office in order to update all security procedures. A consultancy was carried out to guarantee the current legal compliance in security and protection of personal data; an audit was carried out for IT security controls, the security of the software and hardware of the information systems was analysed; and the entire team was trained and made aware of the criticality of data security.
Results
The Girona City Council has an Information Security Management System updated to international requirements that at the same time has allowed the adaptation and improvement of security policies in all the services offered.
“Data security is a universal requirement. All interactions with citizens, by whatever means, must preserve their privacy, and we guarantee it. “
Jacint Paredes, Head of Information Systems and Technologies Service, Girona City Council.