Marin County Grand Jury
• 2024-2025
• Agency Response
Response to:
Cyberattacks: A Growing Threat to Marin Government
Response to Grand Jury Report Form Report Title: “cyber Preparedness: ARE WE There Yet?” Report Date: May 17, 2024
⚠️ Translation Notice: This content has been automatically translated. The original English text is the official version. Translation may contain errors.
⚠️ Este contenido ha sido traducido automáticamente. El texto original en inglés es la versión oficial. La traducción puede contener errores.
Findings and Recommendations 6 findings
F1
Contracts for Information Technology, Information Systems, and Cybersecurity services between third-party providers and Marin County governmental agencies should contain a Business Continuity clause, or other language, protecting that agency from a sudden cessation of services provided by the third-party provider. Agree.
Related Recommendations (1)
R1
Marin agencies should require a current (executed within the last five years), competitively- bid, written contract which includes business continuity language for any third-party Information Technology services they use. Recommendation number R1 has been implemented. The City of Larkspur’s current contract with our third-party Information Technology consulting firm includes business continuity language.
F2
Marin County municipalities should have current, written contracts with third-party providers of Information Technology, Information Systems, and Cybersecurity services, and should not continue to use those providers’ services without a current contract. Agree.
No recommendations for this finding
F3
Membership in insurance risk pools provides the benefits of cybersecurity assessments and audits, which highlight cybersecurity deficiencies and make suggestions for improvement. Agree.
No recommendations for this finding
F4
Having a completed, adopted and regularly updated cybersecurity plan helps ensure that all staff within a government agency are working together to optimize that organization's cyber preparedness and security. Agree.
No recommendations for this finding
F5
Joint Powers Authorities in Marin County exist to provide more efficient and cost-effective services to the people of Marin. Agree.
No recommendations for this finding
F6
The current County Collective Bargaining Agreements prevent the Marin County Department of Information Systems & Technology from unilaterally negotiating managed service agreements (outsourcing work to third parties). The City of Larkspur is not a member of the County of Marin’s collective bargaining unit, nor does it operate within the constraints of their labor union contracts. Although the City’s response indicates “Partially Disagree,” a more accurate response is that finding F6 is not applicable to the City of Larkspur.
Related Recommendations (1)
R6
(a) and (b)). Please see the attached for the response from the City. Should the members of the Grand Jury require any additional information, please contact City Manager Dan Schwarz at 415-927-5110 or [email protected]. Scot Candell Mayor, Larkspur ___________________________________ _09/04/2024_____________ Signature Date RESPONSE TO GRAND JURY REPORT FORM Report Title: “CYBER PREPAREDNESS: ARE WE THERE YET?” Report Date: May 17, 2024 Agenda Date: September 4, 2024 Response by: Scot Candell Title: Mayor, City of Larkspur