Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Roanoke County honors IT team after quick response to federal cybersecurity advisory
Summary
Roanoke County recognized its IT staff after a Cybersecurity and Infrastructure Security Agency advisory flagged actively exploited networking equipment; staff installed a critical patch within hours and vendors observed failed exploitation attempts, officials said.
Roanoke County on Oct. 28 publicly recognized its information technology staff for responding swiftly to an urgent federal cybersecurity advisory and patching vulnerabilities before they could be exploited.
At a meeting of the Roanoke County Board of Supervisors, an IT representative introduced by Marcus, the county’s information technology director, told the board the county received an advisory from the Cybersecurity and Infrastructure Security Agency (CISA) that specific networking equipment was being actively exploited. "We received an urgent security advisory from the federal government's Cybersecurity and Infrastructure Security Agency, CISA, confirming that specific networking equipment were being actively exploited globally," the IT representative said.
The presenter said the IT team, working with vendor partners, first assessed the county’s environment, concluded it had not been compromised, and then shut down attempted accesses and installed a critical patch and other mitigations within hours. The presenter added that an outside vendor later reported seeing several failed attempts to exploit the county’s network using the vulnerabilities identified in the advisory.
Board members praised the team’s response and raised questions about user training and whether an inadvertent click might have triggered a threat. One attendee asked whether someone in the county had "opened a link that they shouldn't have and set this off," suggesting phishing or user error as a possible vector. The IT representative said the county’s vendors monitor activity and that, while user mistakes can happen, vendor monitoring and patching prevented a breach in this instance.
Laurie Gearhart, the county’s director of finance and management services, and Steve Elliott, the budget administrator, were later noted as leading the county’s upcoming work session on the capital improvement program; the IT recognition was part of a larger public meeting before that recess.
The board took no formal policy action at the meeting beyond the recognition and photo opportunity; the IT team said it will continue monitoring systems and working with external partners on mitigation and validation.
