Commissioners approve cybersecurity legal engagement after insurer recommendation

At an 8 a.m. special meeting on Aug. 6, the Boone County Special Commissioners voted to approve a letter of engagement with an outside firm to assist following a cyber incident, following a recommendation from the county's insurance carrier, Travelers. Nick Barr, health administration, told commissioners the insurer asked the county to engage a firm "to help us keep in compliance with all requirements and to protect us and, from any additional liability." The meeting record lists the firm in the transcript as "Cipriani and Werner," with later inconsistent transcription of the firm name; the record does not include a formal not-to-exceed total for the work.

Barr said the county will pay the policy deductible and the insurer will cover amounts above that threshold: "We will pay deductible $5,000 and anything in addition to that would be covered by your insurance carrier," he said. He also said the firm provided hourly rates for partner and associate-level work but that the overall cost is unknown and no maximum was provided. Barr requested that Tim Myers' name be used for execution of the engagement letter. Commissioners moved to approve the engagement, the motion was seconded, and those present voted in favor.

The record shows the county will be responsible for a $5,000 deductible; beyond that, the transcript states Travelers will cover additional costs but does not specify limits, estimated total cost, or a contract cap. The commission did not record a named mover or seconder for the approval in the transcript, and no further contract details or timeline for work were provided during the meeting. The engagement is therefore authorized, but the scope, budget cap, and estimated hours remain not specified in the meeting record.