Vernon County approves password-policy update and backs application for state cybersecurity grant

Vernon County officials approved updates to the county’s password policy and authorized applying for a state and local cybersecurity grant that would reimburse eligible cybersecurity purchases, county IT staff said at the committee meeting.

The county’s IT representative, Connor, asked the committee to support a State and Local Cybersecurity Grant Program application and described the county’s intended use: “we're, looking to apply for this to increase our, EDR and, manage security services through, the Center for Information Security,” Connor said. He later told the committee the application deadline is May 30.

The nut of the request is that the county would buy managed detection and response and other security services and then seek reimbursement from the state. Connor gave an estimated combined project cost “roughly at, 65 to $70,000” and noted the grant offers awards up to $100,000 and is reimbursable. He told committee members the performance period in the grant documents runs from July 1 through Aug. 31, 2027.

County IT staff also reported recent internal work, including migration off copper phone lines, a micro-segmentation project completed for Criminal Justice Information Services (CJIS) compliance, a near-term Windows 11 transition, and an implemented AI policy. Connor said the county has transitioned its fax lines to a cloud provider and is coordinating device replacement and courtroom audio-video upgrades.

Earlier in the meeting staff presented a proposed amended Policy 305 (the county password policy) with minor updates and reminders of best practice; the policy text includes guidance that browser “remember password” features are not recommended and that alternative password managers used on county devices need IT approval. Connor explained there is a county-provided KeePass installation on county devices and that alternative managers require vetting if they use county credentials.

The committee voted to approve the password policy changes and to authorize pursuing the cybersecurity grant application. Committee members discussed budget timing and reimbursement logistics if the county proceeds: the treasurer asked whether the IT department would show a negative balance before reimbursement; staff said typical practice would be to absorb the expense and process a reimbursement request when the state approves and issues funds.

County staff said they will place the grant application on the board agenda for final approval and will proceed with vendor agreements only if the county receives an award.

The motion to approve the password-policy amendments and the motion to authorize applying for the cybersecurity grant both carried by voice vote.