Washington County begins cybersecurity penetration test for local organizations

The Washington County Information Technology and Ag/Planning meeting held on February 25, 2025, focused on enhancing IT services for local towns and addressing cybersecurity measures. Key discussions included the rollout of remote assessing services and the importance of cybersecurity training for municipal employees.

During the meeting, officials discussed plans to implement a remote connection for assessors in various towns, allowing them to utilize the county's real property software without the need for local installations. This initiative aims to simplify operations for towns and improve efficiency in property assessments. The county anticipates having a structured plan in place by the end of the first quarter, enabling them to offer these services more broadly.

Cybersecurity was another significant topic, with officials highlighting the necessity of transitioning to corporate email systems, such as Microsoft 365, to enhance security. The meeting underscored the risks associated with personal email accounts, which are more vulnerable to hacking. Participants expressed the need for annual cybersecurity training for municipal employees, emphasizing that training should be coupled with testing to ensure effectiveness.

Additionally, the county is currently undergoing a penetration test conducted by the Department of Homeland Security. This test aims to identify vulnerabilities within the county's IT infrastructure and will provide a report detailing findings and recommendations for improvement.

Overall, the meeting highlighted Washington County's commitment to improving IT services and cybersecurity measures, ensuring that local municipalities are better equipped to handle technological challenges. The next steps involve finalizing the remote assessing services and addressing the findings from the ongoing cybersecurity assessment.