Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Select Board requires multifactor authentication for town email accounts
Summary
The Select Board adopted multifactor authentication for all town email accounts and directed staff to proceed; trustees also noted ongoing phishing tests and a required "Know Before" training module for town accounts.
The Select Board voted to enable multifactor authentication (MFA) for all town email accounts and to implement periodic password controls recommended by town IT advisors.
A representative from the technology advisory group recommended MFA as a basic security measure and said it has no immediate cost. Select Board member John said, "I've been arguing for multifactor for quite a while now," and recommended MFA be implemented even if password-rotation practices remain discretionary.
Board members also discussed an ongoing phishing-awareness program: employees and officials are being sent simulated-phishing emails and must complete a short training module called "Know Before"; staff accounts risk temporary suspension if the test is failed repeatedly.
On a roll-call vote the board authorized implementing MFA and directed staff to schedule a password-policy change consistent with the group's recommendations.
