Maine Municipal Association has added cyber-liability coverage to its insurance plan for municipalities.
Mount Desert Maine developed a data breach response policy in consultation with the Town Manager, the Police Chief, and a consultant. The data security policy:
-
Defines a data breach as “any occurrence where personal identifying information (such as Social Security numbers or payroll information) is accessed by someone other than an authorized user for anything other than an authorized purpose.”
-
If a breach is suspected, a response team consisting of the police chief, town clerk and contracted information technology (IT) coordinator will immediately investigate.
-
The source of a breach shall be completely disconnected from the town network” and shall be “left powered on and idle until an investigation is completed,”
-
Notification will be provided to everyone whose personal information might have been compromised