Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Information Technology topic
No spam. Unsubscribe anytime.
Curry County IT plans multi‑stage modernization after cyber incident
Summary
Curry County IT told commissioners its three‑year plan prioritizes stabilization, replacement of aging servers and phones, CJIS 6.0 compliance, and layering resiliency such as multi‑ISP failover while noting budget and staffing constraints.
Phil presented Curry County’s IT strategic plan, telling the Board the department’s immediate priority is "stabilization first, then modernization, then resiliency." He said core infrastructure is approaching or at end of life, with servers, storage and legacy phones flagged for replacement.
Phil described concrete near‑term actions: replace end‑of‑life servers and storage, consolidate and standardize the environment, centralize sheriff systems where appropriate, implement a multi‑ISP strategy for primary/backup connectivity, strengthen backup and disaster recovery capabilities, and modernize the county phone system to maintain operational phone service during outages. He said the county will also secure public‑facing web servers (clerk and elections), tighten certificate management and reduce uncontrolled external exposures.
On cybersecurity compliance, Phil warned that CJIS 6.0 (criminal justice information systems) is a "big lift" and said the department is starting CJIS readiness work, improving monitoring, logging and incident response, and strengthening endpoint access controls. He described a small AI pilot limited to a test group with explicit guardrails to prevent uploading sensitive data.
During questions, Phil confirmed the county supports roughly 22 servers, about 110 land phones, and about 160–170 workstations; he estimated responsibility for 60–70 distinct software suites. He characterized current resiliency as "stable" but fragile, estimating a five‑year useful life on new host installs before warranty and support diminish. Phil repeatedly flagged budget constraints, staffing limits and vendor dependencies as the key risks to the modernization timeline.
What’s next: the county will continue planning infrastructure replacements over a 6–36 month horizon, begin CJIS readiness work immediately, and pursue redundancy and phone modernization as funding allows. Commissioners requested follow‑up details and some sensitive deficiencies be discussed in private sessions with IT staff.
Sources: remarks by Phil during the April 1 Curry County strategic‑planning workshop.
