Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Cybersecurity topic
No spam. Unsubscribe anytime.
TABC staff brief commissioners on FY25 cybersecurity audit
Summary
TABC reported results of a fiscal‑year cybersecurity audit covering 09/01/2023–01/31/2025, noting policy recommendations, improved incident response and completion of required annual penetration testing; remaining items will be discussed in closed session.
At the March 24 commission meeting, Chief Information Officer George Stallard and Information Security Officer Joshua Dempsey briefed commissioners on a fiscal‑year cybersecurity audit conducted by McConnell & Jones.
Stallard said the audit scope covered "09/01/2023 to 01/31/2025" and assessed compliance with Texas Cyber Command (formerly DIR) control standards and CJIS Security Policy 5.9.5. He told the commission the audit produced policy and configuration recommendations, prompted changes to incident response, improved vulnerability response times and that the agency completed its required annual penetration testing.
Stallard and Dempsey indicated some details will be discussed in closed session for security reasons. Commissioners raised concerns about the evolving threat landscape, including artificial intelligence and its impact on cybersecurity posture, and directed staff to bring more granular closed‑session briefings on issues that cannot be discussed publicly.
No formal action was taken in open session beyond acceptance of the staff briefing; the commission recessed to executive session for items requiring confidentiality.
