Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Technology director outlines multi-stage cybersecurity plan and short-term steps
Summary
Technology lead James Churchill described a short-to-long-term plan: summer expansion of multifactor authentication, midterm firewall and network segmentation work (about a year), and longer-term logging/monitoring services (roughly two years); he emphasized end-user training and recommended exploring penetration testing with vendors.
James Churchill, the district's technology lead, briefed the committee on cybersecurity priorities and implementation timelines.
Churchill said the district has engaged with a federal/state-funded training program called "Know Before" and emphasized that the largest security risk is end users: "the biggest thing with security ... is the end user." He outlined a three-phase approach: short-term (this summer) rollout of expanded multifactor authentication for staff; midterm (about a year) improvements to firewalls, content filtering and network segmentation; and a longer-term move toward logging and proactive monitoring that could take about two years.
On phishing and compromised email, Churchill said a few staff accounts had been compromised but that the incidents were quickly identified and contained; he reported no known data loss. He said the district is exploring vendor options and federal funding to help offset costs and acknowledged the district lacks an on-site network security specialist.
Committee members asked whether external consultants or penetration testing had been used; Churchill said the district had not engaged a consultant for penetration testing yet but had identified vendors and would pursue conversations. Members also raised the phone-system upgrade and vendor proposals, which Churchill said may reduce monthly costs once vendor details are finalized.
Next steps: Churchill will continue vendor conversations, pursue available grant funding for midterm work, and begin summer MFA expansion for staff accounts.
