Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Commission approves Splunk Cloud and BlueVoyant monitoring addenda after cybersecurity briefing
Summary
The commission approved addenda to cooperative agreements for Splunk Cloud (SHI International) and BlueVoyant monitoring services (via CDW Government) to centralize log collection and provide 24/7 monitoring and incident response; IT staff described protections, contractual limits and remote device antivirus coverage.
Wayne County commissioners approved two IT addenda to improve cybersecurity monitoring: a Splunk Cloud software subscription through SHI International to centralize log collection and analysis, and a BlueVoyant monitoring subscription procured via CDW Government to provide 24/7 monitoring and active incident response.
Ryan Hayes, division director of computing and infrastructure, explained Splunk Cloud will aggregate logs from firewalls, network devices and other systems into a single platform. He said BlueVoyant will provide monitoring and “reactionary activities,” including acting on the county’s behalf when anomalous or malicious activity is detected.
Commissioner Killeen asked what contractual protections limit outside firms’ access to county data and whether contractors could take or sell data. Steve Stedman (IT) said the logs are “basically…login information, some device activity information” and not confidential file contents. Hector Roman, Director of IT, and Hayes explained BlueVoyant will be given read access accounts and will monitor log data; if BlueVoyant detects an infected device, the firm can isolate and remediate the device and then notify county staff.
IT staff said the services are U.S.-based and partners have long-standing relationships with vendors (Microsoft and Splunk). They pledged to provide commissioners with contract specifics that further describe protections, limits on access and legal constraints.
Commissioner Killeen also asked about protections for employees working from home. Jason Reynolds (IT) explained county devices carry antivirus/endpoint protection that communicates regardless of location; staff advised use of the county VPN to access on-premises resources.
Commissioner Killeen moved approval of both addenda; Commissioner Clark Coleman seconded. Commissioners voted and the chair recorded the motion as carried.
