Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity Insurance topic
No spam. Unsubscribe anytime.
After Franklin County ransomware, Somerset commissioners keep cybersecurity coverage unchanged pending county risk-pool review
Summary
County staff reviewed the shared cybersecurity insurance that covers the 16 UT counties, described a Franklin County ransom negotiation that lowered a $250,000 demand to $85,000, and recommended keeping the county's purchase intact while counties with heightened risk pursue additional riders.
County administrators reviewed the county-risk-pool approach to cybersecurity coverage and recommended no changes to Somerset's current arrangement.
Administrator Speaker 1 said the pooled policy provides $1 million in coverage across participating counties, carries a $50,000 deductible, and Somerset's portion of liability insurance includes roughly $7,000 for the cybersecurity component. He cited Franklin County's recent ransomware incident as an example of exposure: "They negotiated from $250,000 in Bitcoin down to $85,000 in Bitcoin and that's what they paid to get their stuff back," Speaker 1 said.
Commissioners asked whether to increase coverage or lower deductibles. Several commissioners, including Speakers 8 and 11, said they would not change the pool and suggested that a county with specific concerns could purchase an individual rider or buy additional coverage while staying in the pool so as to avoid coverage conflicts. One commissioner said the risk pool could offer an extra rider as an administrative option.
Staff also described technical steps the county has taken — dual authentication, upgraded firewalls and weekly backups — and said cybersecurity awareness training for county employees is being planned.
No vote was taken to change coverage at the meeting; commissioners asked staff to consult with Franklin County about any additional coverage pitfalls and to report back if changes are recommended.
