County updates cyber disruption response plan to satisfy audit; adds 24‑hour reporting requirement
Loading...
Summary
Koochiching County adopted minor edits to its Cyber Disruption Response Plan after a BCA audit identified missing compliance language; the update adds a 24‑hour notification requirement to Minnesota DCA’s information security office and clarifies reporting terminology for criminal justice data networks.
County staff presented an update to the Koochiching County Cyber Disruption Response Plan after a Bureau of Criminal Apprehension (BCA) audit found the plan lacked language requiring notification to the Minnesota Department of Administration’s information security office within 24 hours of certain security events.
The board reviewed the proposed edits—limited to added reporting language and clarification of terminology—and approved the updated plan. Staff also noted minor updates to the contact list in the plan (several contacts should be replaced or removed because of retirements) and agreed to make those changes before finalizing the document.
The board adopted the policy change unanimously. Staff said the update brings the county into alignment with FBI and Minnesota DCA security policy and will improve the county’s compliance posture for criminal‑justice and other sensitive systems.
