Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Digital Infrastructure topic
No spam. Unsubscribe anytime.
City receives tech assessment recommending cybersecurity review and at least one IT business-analyst hire
Summary
A city technology assessment presented Feb. 24 recommends establishing technology governance, commissioning a cybersecurity assessment and technology master plan, and adding staff (a business-analyst/project manager) to manage a long list of high-complexity IT projects that current staffing cannot deliver.
San Bruno — City staff presented a 2026 technology assessment that identified staffing gaps, cybersecurity priorities and a long list of high‑complexity projects that exceed current IT capacity.
Jeffrey Gershanik, the assessment lead, told council the assessment is "a snapshot of time" and a precursor to a longer technology master plan. He said the city has completed a significant migration away from CityNet and faces increasing expectations for 24/7 digital services. The report recommends building technology governance to prioritize projects and establishing a technology master plan and a cybersecurity assessment.
On staffing, the assessment noted San Bruno’s authorized IT full‑time equivalents are low compared with peer cities and recommended adding at least one analyst/project‑manager to build business cases and manage high‑impact projects. Gershanik said: "It's to add staff. ... This additional position be requested as part of the midyear budget process so that recruitment could start." He and staff recommended outsourcing specialized items such as a cybersecurity assessment and using a mix of in‑house and consultant work for the master plan.
Council discussion focused on timing and affordability: one member asked whether hiring before completing a master plan is premature. Gershanik and staff replied that an in‑house analyst can help scope, prioritize and shepherd the master plan and cybersecurity work, while the master plan itself (and some security work) could be procured as consultant services. Staff said the IT manager recruitment will be reopened and that funding options will be evaluated in the budget process.
The council received and filed the assessment; staff will return with budget requests and cost estimates for the cybersecurity assessment and master plan.
