Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
CISA assessment prompts Park County staff to propose a cybersecurity oversight and response committee
Summary
An election-office CISA assessment found gaps in formal cybersecurity policies; staff recommended a small quarterly committee (including county and city IT and emergency services) to track vulnerabilities and serve as an incident response team, and a commissioner asked for a formal resolution to establish the group.
County election-office staff reported that a Cybersecurity and Infrastructure Security Agency (CISA) assessment flagged a lack of formal cybersecurity policies and recommended steps to improve oversight.
The staff member said she and colleagues met with a CISA representative for the required triannual assessment and that the assessment repeatedly notes the county lacks documented cybersecurity policies on items such as use of USB devices and systematic employee training. She recommended establishing a small committee—composed of county staff, the city of Livingston IT, emergency services and a commissioner—that would meet quarterly to review vulnerabilities, share updates and act as an incident response team if needed.
Commissioners discussed whether the committee should be established formally by resolution so it can make budget-related recommendations and carry clear responsibilities. One commissioner asked Paul to draft language for a resolution defining the committee’s roles and responsibilities. Commissioners generally favored a formalized approach to ensure the committee could be relied on during incidents and to document the county’s policies and response plan.
Next steps: staff will gather sample resources and suggested responsibilities from CISA, and the county attorney or Paul will draft a formal resolution to establish the committee and its charge for future consideration by the commission.
