📋
Extracted from Consolidated Report

This investigation was originally published as part of a larger consolidated report containing multiple investigations. View the consolidated PDF for the complete document.

Sacramento County Grand Jury • 2019-2020

The Role of the Sacramento County Grand Jury

Published: ∼ June 30, 2020 42 pages
View PDF View Full Original

Findings 13 findings

F1 Page 98
Sacramento County Department of Technology (DTech) is not currently practicing regular, consistent vulnerability scans and penetration testing. Vulnerability scanning and penetration testing are often confused. The two security procedures are quite different and are used for different purposes. At the most basic level, vulnerability scanning aims to identify any systems that are subject to known vulnerabilities while a penetration test aims to identify weaknesses in specific system configurations and organizational processes and practices that can be exploited to compromise security.
F2 Page 98
Voter Registration and Elections Department (VRE) considers election security a major concern and has given it a very high priority. The Sacramento County Registrar of Voters (SCRV) and her staff were very cooperative and began almost immediately to implement changes and corrective measures for identified shortcomings.
F3 Page 98
Media policy is currently under review to address the management of account passwords and the enforcement of the County of Sacramento supported multi-factor authentication methods. The estimated completion date is June 30, 2020. Social Media Accounts are managed by the Communication and Media Office (CMO) and adhere to the County of Sacramento Social Media Policy. Due to the limitations and diversity of Social Media account authentications, a review of Social Media Management software will be conducted by the Sacramento County Department of Technology (DTech). The estimated completion date is January 15, 2021.
F4 Page 99
Sacramento County Department of Technology (DTech) has begun a 16-month county-wide initiative to implement multi-factor authentication. Multi-factor authentication is one of the best deterrents to keep unauthorized users from hacking into computer networks. Voter Registration and Elections Department (VRE) will be one of the first departments to deploy this methodology.
F5 Page 112
Whether or not Sacramento County accepts the SB 1022 funds, the County will still be responsible to fund all the changes required by the Mays Consent Decree.
F6
The existing L&L assessment rates are insufficient to sustain maintenance, repair, and restoration for parks indefinitely. Specifically, in the short term, revenue from L&L assessment rates in BZ3 and BZ4 is insufficient to maintain, repair, and restore all parks in those benefit zones.
F7
The emphasis on individual benefit zones and overlay districts creates a complex and costly administrative burden requiring fragmented budgeting and management, and voter approvals to generate adequate revenue.
F8
The baseline budget for park maintenance, repair and restoration does not take into account, nor is it adequate to fund future park modifications or maintenance associated with new parks and programs.
F9
CCSD’s practice of attempting to increase voter understanding and acceptance of financial responsibility for the parks program through various outreach efforts has had uneven results in terms of gaining greater voter participation and potentially influencing additional funding for this program.
F10
The City of Elk Grove and CCSD have not collaborated effectively to reform and restructure the system.
F11
The current hiring process is antiquated and too long which may discourage potential recruits. The Grand Jury notes that the Police Department is reviewing how the process might be updated and shortened.
F12
POST training requirements for driving and marksmanship contribute significantly to candidate washout/failure at the Police Academy.
F13
The Community Service Officer program has made a positive contribution to both the Sacramento PD and the citizens it serves. Not only has it enabled the PD to reduce call response times even as the population has grown but it has provided a good pool of candidates to fill full time police officer positions.

Recommendations 11