Marin County Grand Jury
• 2024-2025
• Agency Response
Response to:
Cyberattacks: A Growing Threat to Marin Government
Response to Grand Jury Report Form Town of Tiburon Alice Fredericks Mayor*
⚠️ Translation Notice: This content has been automatically translated. The original English text is the official version. Translation may contain errors.
⚠️ Este contenido ha sido traducido automáticamente. El texto original en inglés es la versión oficial. La traducción puede contener errores.
Findings and Recommendations 6 findings
F1
Contracts for Information Technology, Information Systems, and Cybersecurity services between third-party providers and Marin County governmental agencies should contain a Business Continuity clause, or other language, protecting that agency from a sudden cessation of services provided by the third-party provider. Response- The Town of Tiburon agrees with this Finding.
Related Recommendations (1)
R1
Marin agencies should require a current (executed within the last five years), Greg Chanis competitively-bid, written contract which includes business continuity language Town Manager for any third-party Information Technology services they use. Response - This recommendation has already been implemented The Town of Tiburon currently contracts with Apex Technology Management for the provision of Information Technology management services. The contract for these services includes language related to business continuity services.
F2
Marin County municipalities should have current, written contracts with third-party providers of Information Technology, Information Systems, and Cybersecurity services, and should not continue to use those providers' services without a current contract. Response- The Town of Tiburon agrees with this finding
No recommendations for this finding
F3
Membership in insurance risk pools provides the benefits of cybersecurity assessments and audits, which highlight cybersecurity deficiencies and make suggestions for improvement. Response- The Town of Tiburon agrees with this Finding. Town of Tiburon • 1505 Tiburon Boulevard • Tiburon, CA 94920 • P. 415.435.7373 F. 415.435.2438 • www.townoftiburon.org
No recommendations for this finding
F4
Having a completed, adopted and regularly updated cybersecurity plan helps ensure that all staff within a government agency are working together to optimize that organization's cyber preparedness and security. Alice Fredericks Response- The Town of Tiburon agrees with this Finding. Mayor
No recommendations for this finding
F5
Joint Powers Authorities in Marin County exist to provide more efficient and Holli Thier cost-effective services to the people of Marin. Vice Mayor Response- The Town of Tiburon agrees with this Finding. . . . . . . . . . . . . . . . Isaac Nikfar
No recommendations for this finding
F6
The current County Collective Bargaining Agreements prevent the Marin County Councilmember Department of Information Systems & Technology from unilaterally negotiating . . . . . . . . . . . . . . . . . . . managed service agreements (outsourcing work to third parties). Jack Ryan Response- The Town of Tiburon partially disagrees with this Finding. Councilmember . . . . . . . . . . . . . . . . . . . The Town of Tiburon cannot fully agree or disagree with this finding as the Town is not Jon Welner involved in the collective bargaining process at the County level. Councilmember
Related Recommendations (1)
R6
All Marin municipalities should: a. take all steps necessary to acquire an appropriate .gov or .ca.gov domain; Response - This recommendation has not been implemented but will be implemented in the future. Town staff is currently working with Apex Technology Management to acquire the appropriate domain(s) which we anticipate acquiring by the end of calendar year 2024. b. formulate and adopt a plan for rolling out a .gov or .ca.gov website and emails by the start of the 2025-2026 Fiscal Year. Response - This recommendation has not been implemented but will be implemented in the future. The Town anticipates having a plan in place for the transition by the beginning of the 2025-2026 Fiscal Year. Sincerely Greg/Charlis, Town Manager Town of Tiburon
* This report's PDF did not contain easily extractable text and required Optical Character Recognition (OCR) for analysis. There may be minor errors in the extracted findings and recommendations due to OCR limitations with scanned documents.