Town says CISA penetration test completed; commissioners offered a closed session for details

The IT director reported the town completed penetration testing with the Cybersecurity and Infrastructure Security Agency (CISA) and said identified findings across critical, high and medium severities were mitigated within a week. He told commissioners that additional discussion required a closed session because detailed findings would reveal security posture and potentially increase risk.

Commissioners supported receiving a debrief and asked staff to schedule a closed-session briefing at the next meeting. The director said he was exploring moving to annual pen testing subject to budget and availability of third-party vendors. “If you would like to go into closed session and go into the details of the findings, we are certainly happy to do that with you,” he said.