County IT unveils Varonis for enhanced data classification and security training

Maricopa County is taking significant steps to enhance its data management and cybersecurity protocols following a recent informal meeting of the Board of Supervisors. The county has procured Varonis software to assist in the classification and management of its vast amounts of digital data, a move aimed at ensuring compliance with regulatory standards.

Shay McGrew, the Chief Technology Officer for Enterprise Technology and Innovation, outlined the ongoing efforts to implement this software, which has been in development for four years. The county is currently training data stewards from various departments to effectively use Varonis, which will help classify data into three categories: public, restricted, and classified. This training is expected to be completed within the year, allowing staff to properly tag and manage documents as they are created.

In addition to data classification, the county is addressing concerns related to cybersecurity, particularly the rising threat of phishing attacks. McGrew confirmed that all county employees are required to undergo annual security awareness training, which includes identifying phishing emails. The county has also implemented a reporting system within Outlook that allows employees to flag suspicious emails, enabling the information security team to respond quickly to potential threats.

The Board of Supervisors emphasized the importance of these initiatives, particularly in light of findings from the Auditor General regarding IT management practices. The county is committed to improving its identity and access management processes to ensure that employees have appropriate access to data while minimizing risks.

As Maricopa County continues to digitize its operations, these measures are crucial for safeguarding sensitive information and enhancing overall data governance. The ongoing training and implementation of advanced software solutions reflect the county's proactive approach to managing its digital landscape and protecting against cybersecurity threats.