Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Loomis approves Vision Quest contract to overhaul town cybersecurity
Summary
The Loomis Town Council approved a five-year IT services contract with Vision Quest to replace end-of-life equipment, add 24/7 threat monitoring and improve cyber defenses. Council cited an independent assessment that found significant vulnerabilities and estimated breach exposure costs.
The Loomis Town Council voted to approve a multi-year contract with Vision Quest that staff and the vendor say will bring the town’s cybersecurity protections up to current standards. The contract carries a base cost of $6,450 per month for a 60-month term with a 12-month extension option.
The decision followed a detailed presentation from Vision Quest that documented multiple security gaps, including end-of-life firewalls and nearly two dozen workstations the vendor identified as needing replacement. The assessment flagged exposed credentials on the dark web and staff clicks on simulated phishing messages. "Town Of Loomis has major security gaps," the presenter summarized, adding that "criminal gangs will exploit these gaps" if left unaddressed.
Vision Quest described a package of services to reduce risk: device-level endpoint protections, multi-factor authentication and high-security password management, dark-web monitoring, 24/7 security operations center monitoring, role-based access controls, and a breach incident response plan. The vendor also said it would front replacement costs for a subset of end-of-life devices so the town would not incur upfront hardware charges for those units.
The vendor quantified potential financial exposure from a significant breach after insurance as substantial in the assessment materials shown to council. Councilors and the public asked about residual risk; Vision Quest cautioned that no system is 100% immune but said the proposed suite would materially lower the probability and impact of an attack. "It's no longer if but when," the presenter told the council in reference to cyberattacks.
Council members framed the contract as a risk-management choice and compared the cost to hiring an in-house IT department. After discussion and questions from the public, the council approved the contract by roll call (Cortez Aye; Ring Yes; Cartwright Aye; Knisely Yes; Mayor Youngblood Aye).
Next steps include vendor onboarding, device remediation and policy implementation; staff said some licensing and migration work to cloud identity services and file management will be included in the contract scope. The town manager and IT staff will report back to council on implementation milestones and any material budget impacts.
