Finance committee hears proposal for new county endpoint detection service

Iroquois County Finance Committee members discussed a proposal to adopt a licensed endpoint detection and response (EDR) service intended to replace the county's existing antivirus software.

The discussion focused on a vendor demonstration of a product the presenters called "DVR" (described in the meeting as an emergency detection and response service). Committee members and staff weighed the cost, operational impact and deployment timeline.

Why it matters: committee members said the county is already tracking increased cyber risk and noted that an agent-based EDR can isolate infected devices and include a 24/7 security operations center for event mitigation. Staff said the product would reduce the risk of a network-wide compromise by shutting an infected machine off the network until it is cleaned.

Committee members requested a formal written proposal, including pricing, rollout timeline and how the product would integrate with existing management agents. Staff agreed to prepare and circulate documentation in advance of the next finance and full-board meetings so members could evaluate it before a funding decision.

Details discussed: - The presenters said the service is licensed per endpoint and would replace the county's current antivirus. They described the product as behavior- and anomaly-based, backed by both automated detections and a human SOC (security operations center). - Cost discussion: presenters said the incremental cost was roughly "fifty cents more" per machine than the county's current antivirus expenditure, and that the vendor charges a monthly subscription rather than a large upfront license fee. - Deployment: staff estimated the technical rollout could be completed in one to two days for the county's roughly 70 workstations if existing management agents could be used to push the software. - Functionality questions covered tablets used by board members and off-network protection; presenters said the agent would operate on devices both on and off the county network so that threats are blocked before a device returns to the county environment.

No formal procurement motion was made at the meeting. Committee members directed staff to draft and circulate a written proposal (cost, contract terms, rollout plan and timeline) and to place the item on the finance committee agenda and the full board agenda for consideration once the proposal is available.

The committee will consider the written proposal at a subsequent meeting; vendors or contract terms were not approved at this session.