Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity And Planning topic
No spam. Unsubscribe anytime.
Park County staff urge formal cybersecurity committee after CISA assessment; commissioners get long-term project accountability plan
Summary
Following a CISA assessment of the elections office, staff recommended a quarterly cybersecurity committee (including city IT and emergency services) that could serve as an incident-response team; commissioners also received a staff proposal for project accountability mechanisms and a schedule for public updates and executive-team alignment.
A staff member reported that a Cybersecurity and Infrastructure Security Agency (CISA) assessment of the elections office identified gaps in formal cybersecurity policies and recommended creating a small committee—including county staff, city IT and emergency services—to meet quarterly and serve as an incident-response group if needed.
“It just seems in this age, cybersecurity is so important, and a lot of people don't realize local governments are targeted a lot for ransomware,” the presenter said, urging basic education, quarterly updates and tabletop exercises. Commissioners generally favored formalizing the committee and asked Paul to draft a resolution to establish its roles and responsibilities.
Separately, a staff presenter summarized a long-term planning process and proposed three accountability mechanisms: monthly project updates during the last-Tuesday commission meeting, an executive-team rollout to align messaging across departments, and dedicating two projects per work session for deeper discussion. The presenter identified six priority project groups—GreenBox site updates, new revenue, fee-schedule modifications (planning/health), strengthening mental-health supports, public/legislature education, and the Law and Justice Center—and suggested a public-facing education/update in the March work session.
Next steps: commissioners asked staff to draft a formal resolution for the cybersecurity committee and scheduled project updates for Feb. 24 (last Tuesday) and related executive-team discussion Feb. 25. Staff will coordinate participants for the six priority project groups and present updates at future work sessions.
