Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
Committee approves KnowBe4 cybersecurity training renewal; multifactor authentication policy raises staff privacy concerns
Summary
The Properties Committee authorized a one-year renewal of the KnowBe4 security awareness subscription for $7,541.27 and discussed multifactor authentication (MFA) policy concerns, including staff unease about placing MFA apps on personal cell phones and possible alternatives.
The Lapeer County Properties Committee on May 14 recommended the Full Board authorize the IT director to renew the KnowBe4 Security Awareness Training subscription for a one-year term at a cost of $7,541.27, to be paid from line item 631-228-977.250 at no additional cost to the county General Fund. Ian Kempf moved the recommendation and Kevin Knisely supported it; the motion carried.
Danny Bissett, Lapeer County IT Director, described the renewal as the continuation of a three-year subscription that is billed annually and said countywide participation averages about 60–70 percent. He emphasized the program’s phishing-alert features and the training’s role in reducing cybersecurity risk.
Separately, the committee discussed an IT and email policy that includes multifactor authentication (MFA). Moses Sanzo, County Controller/Administrator, outlined the MFA process and Bissett described security measures. Committee members raised concerns about requiring employees to install an MFA app on their personal cell phones; the minutes show alternatives were discussed, including department-paid alternatives, device audits, and charging departments for options, and that concerns about costs and security trade-offs were raised. No formal policy decision was recorded in the minutes.
The committee forwarded the KnowBe4 renewal recommendation to the Full Board for final approval; the IT and email policy discussion was left open for further consideration.
