Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
District reviews June cyber incident, announces security upgrades and partnerships
Summary
District IT provided an overview of a June cybersecurity incident that temporarily made district resources inaccessible, described steps taken (MFA, backups, modified mail filters, 3-2-1 backups) and named local partners including PNNL and a community cybersecurity specialist.
District technology staff briefed the board on a cybersecurity incident that occurred June 11 and described changes the district has implemented to strengthen defenses and recovery capabilities.
An information-technology presenter (identified in the transcript as Mr. Whitcomb) said the June event affected access to some district data and resources but — after investigation — the district determined there was no data loss or data exfiltration. IT staff treated data as if it were compromised as a precaution, which extended recovery time while the district validated data integrity prior to returning systems to normal.
The IT presenter listed technical and operational upgrades that are complete or underway: multifactor authentication and single-sign-on rollouts, strengthened passwords and service-account controls, reduced VPN access, updated mail filters to Microsoft-recommended standards, improved backup and disaster recovery practices (including adopting a 3-2-1 backup strategy and pursuing immutable/off‑network backups), migration planning for user files to cloud platforms, regular external security assessments, and annual cybersecurity awareness training and tabletop exercises.
The presenter acknowledged outside assistance from Pacific Northwest National Laboratory (PNNL) and said PNNL personnel were on site during the incident. The district also announced a community partnership with local cybersecurity specialist Phil Craig (Black Bites Cybersecurity), who is donating time and equipment (a device described as an early warning system) for pilot testing. The IT lead said the district would continue frequent firewall and backup assessments and coordinate with regional agencies and school districts on best practices.
Board members praised the prior work by IT staff and the collaborations that supported rapid response. The board recorded no requests for additional immediate actions beyond the ongoing technical work and community outreach noted by IT staff.
The presentation emphasized that the district continues to refine incident response and business continuity planning and will perform regular reviews and exercises going forward.
