Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity Training topic
No spam. Unsubscribe anytime.
Plumas County approves three-year KnowBe4 cybersecurity training contract
Summary
The Board approved a three-year subscription with KnowBe4 (security awareness training and phishing simulations) not to exceed $22,107.14; staff said the platform supports employee training and is a requirement of county cybersecurity insurance.
Plumas County approved a three-year contract for security awareness training and simulated phishing subscriptions with KnowBe4, the county’s information-technology director told the board on Sept. 2.
The contract is for a three-year term, was described by IT staff as annual security-awareness training, internal phishing simulations and a “phish alert” reporting button. The item was listed in the board packet as a three-year KnowBe4 subscription not to exceed $22,107.14 and was included in the preliminary recommended fiscal‑year 2025–26 budget.
IT staff said the program reduces human‑error risk, runs behavior‑based phishing campaigns, and provides reporting on county staff performance. The service was described as increasingly necessary by IT because insurer requirements for cybersecurity coverage often include security‑awareness programs. The board approved the contract and several board members commented that the program’s simulated phishing exercises had already flagged some employees and led to targeted training assignments.
The IT director said the subscription is not a one-time fix: “This isn’t gonna get easier as time goes along. These people are getting more and more advanced in the way that they attack… so it’s something that we’re gonna have to continue to do.” Board members recommended budgeting ongoing subscriptions as an expected annual cost.
