Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the It Security topic
No spam. Unsubscribe anytime.
ACC IT provider summarizes cybersecurity upgrades and new camera features; board raises email‑attachment questions
Summary
The council’s IT provider reported major cybersecurity and operations upgrades — immutable backups, Mimecast email archiving, Sophos MDR and Verkada cameras with person/vehicle search — and answered board questions about blocked email attachments and false positives.
The IT provider updated the Anthem board on a year of security and infrastructure work, including backups, email protections, endpoint monitoring and new camera capabilities.
Introduced by Executive Director Aaron Baker, CIO Alex Borch said the provider implemented VM backups with immutable cloud storage to protect against ransomware and performs quarterly restore tests. “Once they're up in Wasabi, no ransomware system can ever encrypt them,” Borch said, describing immutable storage.
The provider also installed Mimecast for email archiving and phishing protection, ManageEngine for automated patching and asset management, Sophos for endpoint protection and MDR (managed detection and response), Freshservice for user ticketing/change management, and Cisco Meraki firewalls and VPN for network security. Borch said multifactor authentication and domain‑based Wi‑Fi authentication were rolled out to improve account security.
Borch demonstrated the camera platform’s search features, including motion search, vehicle recognition and person search. “It has facial recognition. You can say, ‘Hey, search for this person,’ and it will find where that person has been,” he said; he described natural‑language search and area‑of‑interest notifications.
Board members asked how to retrieve legitimate attachments blocked by Mimecast. IT staff advised forwarding suspected legitimate messages or attachments to the IT team (Mike) for manual review and release and cautioned that some PDFs may include malicious links that trigger protective blocking. The board did not take formal action; the presentation was accepted for information.
