Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
County approves Microsoft 365 licenses and Arctic Wolf managed‑detection subscription after alerting incidents
Summary
Lincoln County approved two IT invoices — $10,122 for Microsoft 365 licenses (67 devices) and $38,154.75 for additional licenses plus an Arctic Wolf managed detection platform — after IT staff described attempted unauthorized logins the vendor had blocked.
Lincoln County commissioners approved two technology invoices to expand Microsoft 365 licensing and add a managed detection platform after county IT staff described recent suspicious login attempts the vendor blocked.
The board approved a $10,122 invoice covering 67 Microsoft 365 licenses and Active Directory subscription, and a separate $38,154.75 invoice that includes additional licenses and an Arctic Wolf managed detection server. County staff said the spending was recommended by the county’s IT vendor, Burgess Technology, and that some costs were tied to a homeland‑security grant that supported cybersecurity enhancements.
Why it matters: County IT presented examples of attempted unauthorized access to county accounts that Burgess had detected and stopped, including repeated login attempts from unfamiliar locations. Commissioners approved the invoice motions 3–0 and emphasized employee training and multifactor authentication as complementary security measures.
Meeting details and rationale
- Microsoft 365 licenses and Active Directory subscription (67 licenses): $10,122. Approved 3–0. - Microsoft/Arctic Wolf managed detection invoice (26 licenses + Arctic Wolf platform): $38,154.75. Approved 3–0.
IT staff described simulated phishing tests the vendor runs to identify staff who need additional training and said that Burgess's managed detection platform had flagged real attempts to access accounts from foreign IP addresses. Commissioners asked about multifactor authentication, and staff confirmed MFA is enabled for email and remote access as required by the county risk pool.
Ending: The board approved both invoices and directed IT to continue training and report monthly on cybersecurity incidents.
