RESOLUTION NO. 2024-11-12 A RESOLUTION OF THE CITY OF ANNETTA SOUTH, TEXAS, ADOPTING A PROHIBITED TECHNOLOGY POLICY IN ACCORDANCE WITH' TEXASGOVERNMENTCODE 620. WHEREAS, the Texas Government Code 620 requires governmental entities to adopt policies to ensure the protection ofthe City's sensitive information and critical infrastructure; and WHEREAS, the City Council has reviewed the Prohibited Technology Policy, attached hereto, and has determined that the policy adequately meets the requirements of Texas Government Code 620: Prohibition on Use of Certain Social Media Applications and Services on Governmental Entity Devices; and NOW,THEREFORE BEITI RESOLVED BYTHE CITY COUNCIL OF ANNETTA SOUTH,THAT: Section 1 The Prohibited Technology Policy, more fully described in Attachment "A" attached hereto and made a part hereof, is hereby adopted as the official Prohibited Technology Policy of the City of Annetta South. Section 2 This resolution shall take effect immediately from and after its passage. PASSED AND APPROVED THISTHE 12th DAY OF NOVEMBER 2024. Charles Marsh, CMK Mayor ATTEST: UbrAashrel Ellen Woodward, City Secretary County, @ "Attachment A" City of Annetta South Prohibited Technology Policy Inc compliance with Texas Government Code Chapter 620, the City of Annetta South, Texas ("City") adopts this This Policy applies to all City employees, contractors, paid or unpaid interns, and other users ofCity networks. Prohibited Technology Policy. All City employees are responsible for complying with this Policy. Prohibitions: Except where approved exceptions apply, City prohibits the use or installation of Covered Applications on all City-owned or leased devices, including cell phones, tablets, desktop and laptop computers, and other internet- 1. The social media service TikTok, or any successor application or service developed or provided by ByteDance Limited, or an entity owned by ByteDance Limited. 2. A social media application or service specified by proclamation oft the Governor under Texas Government Code Section 620.005. City also prohibits the installation or operation of Covered Applications on employee-owned devices that are capable devices. Covered Applications include: used to conduct City business. Exceptions: extent necessary for: The City will permit the installation and use ofa Covered Application on a City-owned or leased device to the 1.1 Providing law enforcement, or 2. Developing ori implementing information security measures. acting as Director ofl Information Technology or his/her designee. Responsibilities oft the Department ofInformation Technology: The City's Department ofI Information Technology must: No employee of the City may install or use a Covered Application without the approval of the City Secretary 1.I Identify, track, and manage all City-owned or leased devices, including mobile phones, tablets, laptops, desktop computers, or any other internet-capable devices to: a. Prohibit the installation ofa Covered Application. C. Remove a Covered Application from a City-owned or leased device that was on the device prior to d. Remove an application from a City-owned or leased device if the Governor issues a proclamation b. Prohibit the use ofa Covered Application. the passage of S.B. 1893 (88th Leg., R.S.). identifying it as a Covered Application. Prohibited Technology Policy- Page lof2 2.1 Implement the following security measures: [insert measures the City deems appropriate such as: a. Restrict access to "app stores" or unauthorized software repositories to prevent the installation of b. Maintain the ability to remotely wipe non-compliant or compromised mobile devices. unauthorized applications. C. Maintain the ability to remotely uninstall unauthorized software from mobile devices. d. Other City-implemented security measures.] 3.1 Develop procedures for: a. Allowing exceptions to the prohibitions ini this Policy; and b. When an exception is] provided: i. The measures the City will take to mitigate the risks posed to the City during the Covered Application's use [including measures that the City deems appropriate for its own Policy). ii. The documentation of the measures taken to mitigate the risks posed to the City during the use oft the Covered Application. City will verify compliance with this Policy through various methods, including but not limited to, IT/security An employee found to have violated this Policy may be subject to disciplinary action, up to and including This Policy will be reviewed [entity-defined frequency] and updated as necessary to reflect changes in state law, additions to applications identified under Texas Government Code Section 620.006, updates to the prohibited technology list posted to the Texas Department of Information Resources' website, or to suit the needs of the system reports and feedback to leadership. termination of employment. City. Prohibited Technology Policy- - Page2of2