Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Lovington introduces CTSI as new IT manager to harden city cybersecurity and disaster recovery
Summary
City staff introduced CTSI, a managed IT and cybersecurity vendor, and described deployed protections including endpoint detection, email filtering, phishing simulations and an on-site/cloud disaster-recovery solution aimed at minimizing downtime.
The Lovington City Commission heard a presentation from CTSI, the city’s newly engaged IT services provider, which the city says will strengthen cybersecurity, backup capacity and routine IT support.
Tristan Davis, technology consultant at CTSI, told the commission that CTSI has deployed endpoint detection and response tools, an advanced email filter and an offensive cybersecurity tool that isolates infected devices before attacks can spread. ‘‘If a device were to get infected that tool will remove that device from the network before it can spread and infect anything else,’’ Davis said.
City staff said CTSI also installed an on-site backup appliance that replicates encrypted backups to the cloud so servers can be run virtually in the event of a local failure. ‘‘This specific disaster recovery tool is truly built to minimize downtime,’’ Davis said, describing a configuration that allows the city to restore operations with only an internet connection.
City Manager (staff) said the engagement is still in its 60-day period but staff have already seen ‘‘promising’’ results managing infected devices and phishing attempts. Commissioners asked whether CTSI provides user training and simulated phishing; Bailey Franks, CTSI’s technology strategy analyst, said CTSI runs micro-trainings and simulated phishing campaigns and reports who clicks malicious links so the city can target training.
CTSI offered to provide written materials and follow-up reports and said it supports municipal clients in Texas and eastern New Mexico. Staff said they will review CTSI’s reports with department leads and bring any policy changes or budget requests back to the commission.
The presentation came amid repeated warnings from staff about recent fraudulent emails targeting the city; CTSI representatives advised that layered defenses and regular training reduce risk and recommended a schedule of ongoing monitoring and periodic third-party penetration testing.
Next steps: staff will circulate CTSI’s summary reports to the commission and work with departments to schedule cybersecurity awareness training and an implementation timeline for additional recommended tools.
