Information Security Department

Responsibilities & Functions

1. Develop and implement the Council’s information security strategy in alignment with the National Cybersecurity Strategy.
2. Manage and monitor the implementation of information security policies and controls in the Council.
3. Review the design of information systems from a cybersecurity perspective and define the related information security requirements in advance.
4. Develop and implement the Council’s cybersecurity operations such as security monitoring, incident response, digital forensics, and other information-security processes.
5. Conduct the necessary security tests to ensure the Council is not exposed to breaches or security vulnerabilities.
6. Handle and manage cybersecurity incidents and threats in the Council to minimize their impact and ensure effective recovery.
7. Contribute to the development and implementation of emergency response plans to ensure rapid recovery from security risks.
8. Manage and monitor security-related event logs in the Council.
9. Organize the granting of access privileges for Council system users and monitor access attempts in coordination with the IT Systems Department.
10. Identify optimal methods, technologies, and cybersecurity requirements to secure systems, and provide advice and support.
11. Define and operate technical security controls and solutions as part of cybersecurity operations.
12. Develop and implement cybersecurity awareness programmes for all Council employees.
13. Develop and monitor compliance programmes with national and international standards and prepare related reports.