Can your government's cybersecurity program use a boost? SAO's IT policy guide can help

The Office of the Washington State Auditor launched the Cyber Checkup program in 2023, and one common result we found is that many local governments either lack key information technology (IT) policies or need to improve the ones they have. 

IT policies are the foundation of any strong cybersecurity program. They set expectations, rules and requirements for employees and vendors when it comes to using, managing and securing a local government’s IT resources and data. Without these policies, local governments face higher risk of security breaches, data loss and other incidents that could harm their organizations and the people they serve. 

But creating effective IT policies can feel daunting, especially because different groups—employees, leadership, managed service providers and third-party vendors—need different information. Our recently updated resource, It starts with policy: A guide to jump-starting your cybersecurity program, can help leaders understand what their government’s policies should cover. 

The guide outlines the policy needs and responsibilities for four key users: leadership, employees, managed service providers and other vendors or third parties. It also includes a list of recommended policies and links to resources to help you create them, as well as recommended policy guidance for AI use. Download a copy today to begin strengthening your government’s cybersecurity program. 

Start improving your cybersecurity today

Whether your government already has a cybersecurity program or is just starting out, SAO’s free #BeCyberSmart Program services can help you understand your risks and take practical steps toward improvement. Our cyber checkups are independent, confidential (within RCW limits) and designed to help you understand your current safeguards, identify gaps and prioritize next steps. A cyber checkup is not an audit; it’s a resource to help you improve your cyber health.

We also offer cyber incident response workshops to help your team think through the steps necessary to develop or strengthen an incident response plan. These half‑day sessions combine expert guidance, templates and scenario-based exercises so your staff can prepare for a real cyber incident before one occurs.

Visit our Resource Library 

All our cybersecurity and IT guidance, including the It starts with policy guide, is available online at no cost. Explore SAO’s Resource Library to find tools, best practices and other resources to support your cybersecurity program.

How to reach us for more assistance 

Have questions about cybersecurity, resources or #BeCyberSmart Program services? SAO staff are available to help you figure out which services are best for your government and tailor the work to your priorities. Reach out to us at Center@sao.wa.gov, or call (564) 999-0818 to get started.