Colorado HAVA director.
We hope that by now you have dismissed Boulder County’s draft security plan as a joke. The four page “plan” with accompanying attachments is worthless. We hope that the Boulder County effort is not representative of the other county plans.
We suggest that you refer Boulder County to professionally developed security standards and papers including:
- DEPARTMENT OF DEFENSE TRUSTED COMPUTER SYSTEM EVALUATION CRITERIA - http://www.radium.ncsc.mil/tpep/library/rainbow/5200.28-STD.html
- CERT Coordination Center – http://www.cert.org/octave/
- HIPPA Security Standards - http://www.hipaadvisory.com/regs/finalsecurity/
Security is a professional subject area, like brain surgery, and should not be attempted by amateurs.
