Commission approves countywide cybersecurity assessment; board asks to review optional scope over $165,000

Pinellas County approved a one‑year comprehensive security risk assessment contract to evaluate enterprise systems and department technology, with a one‑year extension option. The county’s Business Technology Services said the vendor will assess vulnerabilities across departments and provide revalidation work as needed.

Chief Information Officer Jeff Roers told commissioners that it is county practice to include an optional contingency in these assessments to allow rapid follow‑up if auditors or assessors identify urgent issues. “If we do identify something that’s of a critical nature … we want to address it very quickly,” Roers said, explaining why the contract includes optional services capacity.

Commissioner Kevin Eggers supported the base contract but said any use of the optional $165,000 in services — more than one‑third of the optional-plus-base total — should come back to the board for approval instead of being acted on by staff alone. “If we’re going to tap into that optional service … it should come back to the board for approval,” Eggers said.

County staff confirmed the assessment itself is a diagnostic engagement; remediation work would be performed by county IT or a separate vendor and would be reassessed by the contractor. The board approved the contract by voice vote under the consent agenda. County staff said the total contract (base plus option) is within the current fiscal year’s budget and that the assessment is expected to be completed in roughly one year.

Ending: The assessment is intended to update Pinellas County’s security posture after several years without a full audit; staff will return to the board if the optional remediation funding is needed and if commissioners require additional review.