Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity And Continuity topic
No spam. Unsubscribe anytime.
Board Reviews Business Continuity Plan and Cybersecurity Preparedness; IT Outlines 48-Hour Recovery Target
Summary
District IT presented a business continuity plan and business impact analysis required for cyber insurance that estimates a 48-hour target for restoring critical functions; the board discussed tabletop exercises and ongoing maintenance.
District information technology staff presented the district—s business continuity plan and the underlying business impact analysis required by the district—s cyber insurance, describing steps for recovery and an estimated 48-hour target to restore critical systems in a best-case scenario.
IT manager Jacob and district staff said the plan maps essential functions, identifies systems and processes that must be sustained for payroll and instruction, and outlines mitigation strategies, recovery sequencing (power, network, backups, systems) and maintenance cycles. The plan also ties to the district—s incident response and disaster recovery plans and will be subject to tabletop exercises and annual review.
Staff explained the plan includes contact trees, incident notification committees, assigned roles and a schedule for testing and training. They said the plan is an evolving document that will be updated based on exercises, staff changes, and input from external partners (for example, county office systems that the district depends on). The board did not vote on the plan during the session but asked for follow-up on test schedules and integration with county systems.
