While a significant amount of work has been completed over the past few weeks to reestablish our IT functions following the cyberattack, a lot of work continues behind the scenes toward reestablishing a safer network environment. Our recovery efforts will include updated policies and procedures that will guide future practices relating to IT.  As we work to identify and finalize these new policies, it is important to remind everyone to work with your Directors to develop interim procedures that will ensure appropriate handling of any sensitive data you are currently handling, as past practices may no longer meet updated requirements. Most importantly, please note that no sensitive data may be sent via unencrypted email, fax or left unsecured within your workspaces.

We are also working to develop an agency-wide email and record retention policy. Until we officially conclude the required evaluation of any sensitive data within our email servers, you may not delete any files or emails that currently exist with your accounts or folders. Your cooperation with this request is extremely important.

We will provide you with the updated policies and procedures as soon as they are approved for distribution. We appreciate your patience and the updated practices that allowed us all to continue to work while we rebuilt the network following this very unfortunate matter.