OHIO DATA SECURITY ASSURED IN SPRINGFIELD Springfield assures data security: "Springfield assures data security

By Samantha Sommer

Staff Writer

Monday, November 13, 2006

Stolen laptops and hacked-into Web sites can lead to leaks of sensitive information.

Computer security breaches recently have occurred at the Veterans Administration, Census Bureau and Ohio University."

The city of Springfield assured its computers and data are safe.

The city has about 30 laptops for employees, who have no restriction on taking them home.

But restrictions do dictate what can be on laptops taken home, including no information that isn't a public record.

"Laptops aren't really the problem," said Neil Harkins, information technology director. "It's what you allow to be put on them is where you can get into trouble."

The city follows best business practices for its overall computer security, including virus protection, firewalls, spam filters and e-mail attachment restrictions.

Its databases are protected and data cannot be extracted without authorization.

The city has independent audits of its security practices.

The servers also are physically secured and in restricted places.

"Unless you have physical security, you've got no security," Harkins said.

Residents can file city income tax returns online, but that is handled through a vendor, Harkins said, and the information is not stored on the Web server.

Computer use policies are important, Harkins said, but the city focuses on physical security and limiting what people can and can't do.

"Your best defense against all of that is lack of opportunity," he said.