Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Inyo County IT says cybersecurity overhaul 80% complete with 24/7 monitoring from eSentire
Summary
County CIO reported May 27 that the eSentire contract implementing endpoint protection, network sensors, a 24/7 security operations center and centralized log aggregation is largely in place; staff said endpoint and network sensor deployments are complete and log aggregation is about 80% finished.
Inyo County Chief Information Officer Noam Shindar and Assistant CIO Abhi Aitaraju updated the Board of Supervisors on May 27 about a countywide cybersecurity contract with eSentire.
Shindar said the work approved in February includes four components: endpoint protection, network sensors, a security operations center providing 24/7 monitoring and response, and log aggregation. "That vendor is called eCentire," Shindar said. Aitaraju reported that endpoint protection is "100% implemented" and that a small Falcon icon on county machines indicates the endpoint agent is active. Two network sensors are installed — one in Independence and one in Bishop — and a 24/7 security operations center is actively monitoring and can notify county staff by phone or email and take response actions.
Log aggregation — routing logs from firewalls and other infrastructure to a centralized analytics platform — is "mostly done" and about 80% complete, Aitaraju said. County staff characterized the work as consolidating protections under a single vendor to improve situational awareness and make it easier to detect and stop threats outside normal working hours.
No action was required of the board; the update was informational. IT staff thanked the board for authorizing the contract and said they continue to finalize the log aggregation and monitoring tuning.
