Commissioners pressed the auditor's office on whether its current IT and security arrangements could meet insurer and state expectations for a countywide cybersecurity framework. Speaker 4 said insurers and the county insurance pool have asked to see what the "umbrella" approach is before rating coverage next year: "The insurance has already advised the commissioners... they wanna know what that umbrella is before they rate us for insurance next year," Speaker 4 said.

Speaker 3 described steps the auditor's office is taking: a new cloud-based real-estate system scheduled to go live early next year and a cloud financial system (NetSuite/Oracle) that the office expects will add efficiency. "We're implementing our new real estate system that goes live first of the year. That's gonna be cloud based," Speaker 3 said.

Staff and elected officials agreed that the county should coordinate IT and monitoring while preserving each office's software choices. Speakers emphasized communication between the auditor's IT staff and other county IT leads (Speaker 2 recommended conversations with "Todd," the county IT contact) so tools and monitoring (for example, CrowdStrike) are aligned and incident response is coordinated.

No formal cybersecurity policy was adopted during the session; commissioners said they expect to encourage other elected offices to align under a common approach and signaled an intent to have a countywide policy in place for insurer review in the coming months.