|Submitted||Oct. 25, 2014|
MuckRock users can file, duplicate, track, and share public records requests like this one. Learn more.
To Whom It May Concern:
Pursuant to the state open records law, Ariz. Rev. Stat. Ann. Secs. 39-121 to 39-122 and 39-128, I hereby request the following records:
Any slides, memos, e-mails, or training materials issued to employees relating to the operation of electronic devices (computer, tablet, or mobile phone) issued since 2011 regarding the following topics:
1. Data Security (including the usage and configuration of Anti-Virus, Firewalls, Password reset policies, and VPNs.)
2. Whole Disk Encryption (and required configuration settings)
3. Mobile Device Management provisioning (including information on settings for tracking and restrictions placed on devices by installed device management profiles)
Additionally, I request information on Operating System and Application update requirements, such as standards in place requiring employees to update or not update devices, including emails and communications where IT departments request that employees defer updates from being applied immediately.
I also request that, if appropriate, fees be waived as I believe this request is in the public interest. The requested documents will be made available to the general public free of charge as part of the public information service at MuckRock.com, processed by a representative of the news media/press and is made in the process of news gathering and not for commercial usage.
In the event that fees cannot be waived, I would be grateful if you would inform me of the total charges in advance of fulfilling my request. I would prefer the request filled electronically, by e-mail attachment if available or CD-ROM if not.
Thank you in advance for your anticipated cooperation in this matter. I would request your response within ten (10) business days.
Our office has received your Public Records Request. The appropriate
department will follow up with you when the information is gathered.
Easier and more convenient way to find public records
The city of Phoenix receives many requests for a variety of records - some
of which the city maintains while others are maintained by other
government agencies. On https://www.phoenix.gov/pio/public-records you can
find a listing of some of the most commonly requested records along with
the appropriate contact information and website for your convenience.
(Please copy and paste the link on your web browser.)
To Whom It May Concern:
I wanted to follow up on the following Freedom of Information request, copied below, and originally submitted on Oct. 25, 2014. Please let me know when I can expect to receive a response, or if further clarification is needed.
Thank you for your help.
I have asked the liaison, Juanita Carver, assigned to your request to
contact you for the status update. You may contact her at (602) 261-8097.
DEPT MR 13949
PO Box 55819
Boston, MA 02205-5819
In response to your public records request (attached below) requesting
training materials issued to employees relating to the operation of
electronic devices (computer, tablet, or mobile phone) issued since 2011
regarding data security, whole disk encryption, and mobile device
management provisioning the following information is provided.
City of Phoenix employees utilize the SANS Securing the Human online
computer based training (CBT) modules as the primary communication medium
for information security training. These CBT videos are fully SCORM and
Federal 508 compliant and is hosted on the SANS Virtual Learning
Environment (VLE). Video courseware examples can be viewed at
learning modules cover password management, data encryption, and mobile
In addition to these online CBT training modules, periodic information
security training sessions are offered to employees throughout the year
during National Cyber Security Awareness Month and International Data
Privacy Day. Monthly information security articles are also provided to
employees through the City of Phoenix City Connection newsletter. These
articles address current hot topics and have included security awareness
information about phishing attacks, ransomware/cryptowall malware,
identity theft, and tips to prevent online fraud.
The City of Phoenix also offers security awareness resources and
information to our community through the use of an online website located
at www.phoenix.gov/infosec. This award winning website provides current
information presentations about alerts and warnings, data breaches, cyber
bullying, home PC protection, mobile device protection, social media
security and many other topics all offered for easy downloading in PDF
In reference to your "request information on Operating System and
Application update requirements, such as standards in place requiring
employees to update or not update devices, including emails and
communications where IT departments request that employees defer updates
from being applied immediately" the following is provided.
The City of Phoenix does not have any IT standards that states that
employees are to defer updates from being applied immediately. Enterprise
operating system and application updates are applied following specific
procedures and change management approval. Operating system and
application updates are tested prior to being placed into a production
status. No email messages or other communication mediums have been
identified that would indicate that employees defer updates from being
For further information regarding City of Phoenix information security
topics please visit www.phoenix.gov/infosec. Thank you.