Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity Training topic
No spam. Unsubscribe anytime.
Norfolk County touts 86% completion in state cybersecurity training; annual program to continue
Summary
County Chief Information Officer Sam Edmonds reported Norfolk County’s high completion rate in the state’s Know Before cybersecurity training, described annual requirements, simulated phishing tests and plans to continue and expand training in 2025.
Sam Edmonds, Norfolk County chief information officer, told commissioners on Feb. 12 that the county achieved an 86% completion rate last year in the state’s municipal cybersecurity training program and was named one of the program’s “high achievers.”
The training, provided at no cost through the Executive Office of Technology Services and Security, uses the Know Before platform this year and includes 18 lessons plus entry and exit awareness tests. Edmonds said the county’s completion figure—86% of participants finishing the full course—placed it among about 28 programs that exceeded the state’s 70% high‑achiever threshold.
Edmonds said the state’s platform offers flexibility this year: counties can group and schedule lessons rather than taking modules only when the state releases them. He described features intended to boost retention, including monthly security tip emails, mobile access to lessons, certificate issuance when staff finish, and simulated phishing emails with remedial lessons for anyone who clicks a test phishing link. “We actually had 86% completion,” Edmonds said, adding that the county had 29 people who completed the full set of lessons last year.
Commissioners discussed expectations that cybersecurity training be recurring and part of broader defensive measures such as multi‑factor authentication. One commissioner said Sam included a new hire request in his FY2026 budget proposal for a cybersecurity awareness position; the commissioner framed that as a proposed step to sustain the program and reporting.
Edmonds clarified operational details: the full 18‑lesson traditional path takes about an hour total and is usually spaced across months; there is an advanced path for people who can pass module tests and skip lessons. He noted the county will continue to allow the registry staff to use their existing training path where internet access at their desks is limited.
The commissioners asked whether the program carries a fee; Edmonds said the state provides the program at no cost. He also said the school district is signed up for the 2025 session and that county staff will continue to coordinate with school IT staff on enrollment.
Looking ahead, Edmonds invited commissioners to participate voluntarily in the training and said staff will provide status reports through the year. He said the county will review last year’s scores to place qualifying staff on the advanced path where appropriate.
