Summary of Responses to the 2018-2019 San Mateo County Civil Grand Jury Reports and Summary of Follow-up as to

Conclusions 1

• CL1
  8 Is San Mateo County at Risk of a Large Measles Outbreak? R1. School districts that enrolled students who did not meet state vaccination requirements for the 2018/2019 school year should report to their Governing Board whether overdue vaccinations have been completed by October 1, 2019, and the Governing Boards of these districts should publish updated vaccination data for its schools on the school district’s website by November 1, 2019. R2. Beginning with the 2019/2020 school year, school districts that enroll students who do not meet vaccination requirements in subsequent school years should report to their Governing Board whether overdue vaccinations have been completed by March 31 of each year, and the Governing Board should publish updated vaccination data for its schools on the school district’s website. R3. The San Mateo County Health Communicable Disease Control Program should study the feasibility of testing people visiting San Mateo County clinics for their level of measles immunity. The results of the study should be reported to the San Mateo County Health Department Board by January 1, 2020. R4. Within three months of this report, the San Mateo County Health Communicable Disease Control Program should request funding for upgrading the resources needed to address outbreaks of measles and other communicable diseases from the Chief of the San Mateo County Health Department. San Mateo County Health should respond within three months of receiving those requests. RESPONDING AGENCY REC A O P M PL M I E C N A D B A L T E I ON RESPONSE FOL Y L E O A W R UP R1 N/A R2 NA San Mateo County Board of Supervisors R3 Will not implement as not warranted. R4 Implemented. Will not implement but district does comply R1 with state immunization requirements. Will not implement but district does comply R2 Bayshore with state immunization requirements. School District R3 N/A R4 N/A Will not implement but district does comply R1 with state immunization requirements. Will not implement but district does comply R2 Belmont-Redwood Shores with state immunization requirements. School District R3 N/A R4 N/A R1 Will implement by November 1, 2019. R2 Will implement by March 31, 2020. Brisbane School District R3 N/A R4 N/A R1 Will not implement; district reports to State. R2 Will not implement. Burlingame School District R3 N/A R4 N/A R1 No response. Follow-up sent with no response. R2 No response. Follow-up sent with no response. Cabrillo Unified School District R3 N/A R4 N/A 9 Is San Mateo County at Risk of a Large Measles Outbreak?, continued RESPONDING AGENCY REC A O P M PL M I E C N A D B A L T E I ON RESPONSE FOL Y L E O A W R UP Will not implement but district does comply R1 with state immunization requirements. Will not implement but district does comply R2 Hillsborough City with state immunization requirements. School District R3 N/A R4 N/A Will not implement but will consider adding R1 link to this data on CDPH website. Will not implement but will consider adding R2 Jefferson Elementary link to this data on CDPH website. School District R3 N/A R4 N/A R1 No response. Follow-up sent with no response. R2 No response. Follow-up sent with no response. Jefferson Union High School District R3 N/A R4 N/A Will not implement but district does comply R1 with state immunization requirements. Will not implement but district does comply R2 La Honda-Pescadero Unified with state immunization requirements. School District R3 N/A R4 N/A Will not implement but district does comply R1 with state immunization requirements. Will not implement but district does comply R2 Las Lomitas Elementary with state immunization requirements. School District R3 N/A R4 N/A R1 Will implement by December 1, 2019. Will not implement as current reporting R2 Menlo Park City practices are legally compliant. School District R3 N/A R4 N/A Will not implement but district does comply R1 with state immunization requirements. Will not implement but district does comply R2 Millbrae with state immunization requirements. School District R3 N/A R4 N/A Will not implement but district does comply R1 with state immunization requirements. Will not implement but district does comply R2 Pacifica with state immunization requirements. School District R3 N/A R4 N/A 10 Is San Mateo County at Risk of a Large Measles Outbreak?, continued RESPONDING AGENCY REC A O P M PL M I E C N A D B A L T E I ON APPLICABLE RECOMMENDATION FOL Y L E O A W R UP R1 Will not be implemented as it is not warranted. R2 Will not be implemented as it is not warranted. Portola Valley School District R3 N/A R4 N/A R1 No response. Follow-up sent with no response. R2 No response. Follow-up sent with no response. Ravenswood City School District R3 N/A R4 N/A R1 Will implement by November 1, 2019. R2 Will be implemented by March 30, 2020. Redwood City School District R3 N/A R4 N/A Will not implement but district does comply R1 with state immunization requirements. Will not implement but district does comply R2 San Bruno Park with state immunization requirements. School District R3 N/A R4 N/A R1 Will not implement as not warranted. R2 Will not implement as not warranted. San Carlos School District R3 N/A R4 N/A Will not implement but will publish data on R1 district website. Will not implement but will publish data on R2 San Mateo-Foster City district website. School District R3 N/A R4 N/A Will not implement as not warranted; district R1 does comply with state immunization requirements Will not implement as not warranted; district San Mateo Union High School R2 does comply with state immunization District requirements R3 N/A R4 N/A 11 Is San Mateo County at Risk of a Large Measles Outbreak?, continued RESPONDING AGENCY REC A O P M PL M I E C N A D B A L T E I ON APPLICABLE RECOMMENDATION FOL Y L E O A W R UP R1 No response. Follow-up sent with no response. R2 No response. Follow-up sent with no response. Sequoia Union High School District R3 N/A R4 N/A Will not implement as it is not warranted but R1 district does comply with state immunization requirements. Will not implement as it is not warranted but South San Francisco Unified R2 district does comply with state immunization School District requirements. R3 N/A R4 N/A Needs further analysis as district believes its R1 current reporting practices are legally compliant. Needs further analysis as district believes its Woodside Elementary R2 current reporting practices are legally School District compliant. R3 N/A R4 N/A 12 Just Missed It! Fixing Samtrans’s “Caltrain Connection” R1. SamTrans should study the feasibility of coordinating “Caltrain Connection” bus schedules with existing Caltrain train schedules to facilitate bus/train transfers and minimize wait times. The SamTrans Board of Directors should consider the results of that study at a public hearing by June 30, 2020. R2. SamTrans should perform marketing research on existing and potential riders of “Caltrain Connection” buses, including those who use Caltrain, to determine their interest in coordinating “Caltrain Connection” bus schedules with existing Caltrain schedules. The SamTrans Board of Directors should consider the results of that survey at a public hearing by June 30, 2020. R3. Caltrain should survey existing riders of Caltrain trains in San Mateo County, including those who use SamTrans, to determine their interest in coordinating “Caltrain Connection” bus schedule arrival times at Caltrain stations with existing Caltrain schedules. The Caltrain Board of Directors should consider the results of that study at a public hearing by June 30, 2020. R4. The Boards of Directors of SamTrans and Caltrain should discuss together the value and feasibility of using “Caltrain Connection” buses as a feeder system to Caltrain to reduce traffic congestion. This should be undertaken by December 31, 2019. RESPONDING AGENCY REC A O P M PL M I E C N A D B A L T E I ON RESPONSE FOL Y L E O A W R UP R1 N/A R2 N/A Will conduct customer surveys by fall Peninsula Corridor Joint 2019; unclear from response if Caltrain R3 connection schedules will be included and Powers Board (Caltrain) 2020-21 also not clear if public hearings will be held. Caltrain and SamTrans will exchange R4 information but no joint meetings will be scheduled. Will conduct outreach with results by R1 summer 2021, with recommendations to 2022-23 their board by 2022. Will conduct outreach with results by R2 summer 2021, with recommendations to San Mateo County Transit their board by 2022. 2022-23 District (SamTrans) R3 N/A Will conduct outreach with results by summer 2021, with recommendations to R4 their board by 2022. Does not anticipate a 2022-23 joint board meeting with Caltrain. 13 Planning for the County’s Waste Management Challenges R1. The Grand Jury recommends that the San Mateo County Office of Sustainability replace the existing 1999 Countywide Integrated Waste Management Plan (CIWMP), including the Summary Plan, the landfill Siting Element, and the Non-Disposal Facilities Element (as amended in 2010) with a revised plan by January 1, 2021. At a minimum, the revised plan should address:  Updated descriptions of solid waste management facilities and programs implemented by the County, local jurisdictions, and their private franchise holders.  Goals, objectives, policies and implementation measures that reflect the overall 75 percent waste diversion target contained in AB 341 (2011), the 75 percent organics waste diversion target contained in SB 1383 (2016), the 20 percent edible food diversion target contained in SB 1383 (2016), and consider the more aggressive waste diversion targets contained in the CAPs adopted by several San Mateo County jurisdictions, including the goal of “zero-waste.”  Possible policies related to the impact of waste management practices in San Mateo County on the global environment, including emissions of methane from landfills, and the environmental and social impacts that may occur when the county’s recyclables are exported to other nations with the less stringent environmental and worker protection practices than in the United States.  Environmental justice concerns as they relate to solid waste management decision-making by local jurisdictions in this county.  A strategy and schedule for providing additional landfill capacity after year 2034, when the county’s Ox Mountain landfill is projected to reach its current permitted capacity.  A County ordinance banning the disposal of green waste and possibly other organics at the Ox Mountain landfill, in order to support organic waste diversion programs and conserve landfill capacity.  Whether the Office of Sustainability should implement additional countywide programs including public education and technical assistance related to waste diversion. The CIWMP should also consider whether the Office of Sustainability should coordinate the rescue of edible food waste at the countywide level. R2. The Grand Jury recommends that the City/County Association of Governments (C/CAG), in its role as the Local Task Force (LTF), participate with the County Office of Sustainability in revising the CIWMP. R3. The Grand Jury recommends that the San Mateo County Office of Sustainability make the existing 1999 CIWMP and all Five Year Reviews available to the public on its website by September 30, 2019 and place the revised CIWMP on its website after it is drafted and adopted by the County Board of Supervisors. FOLLOW RESPONDING AGENCY REC A O P M PL M I E C N A D B A L T E I ON RESPONSE Y U E P A R The recommendation requires further analysis. The five-year review process is currently underway, with the final review report expected to be sent to the R1 2020-21 Board of Supervisors for approval in November 2019, San Mateo County which could result in a recommendation to revise the Board of Supervisors CIWMP. R2 N/A Implemented. R3 R1 N/A City/County Association of R2 Implemented. Governments (C/CAG) R3 N/A 14 Security of Election Announcements Protect the Public Trust in Election Communication R1. Incorporate Communications into Election Security Definition: ACRE should adopt a policy that defines election security to include the security of the ACRE website, ACRE staff email accounts, social media accounts used for ACRE announcements, and other platforms ACRE uses for publishing election announcements. ACRE should implement this recommendation by December 31, 2019. R2. Publish Updated Security Policy: ACRE should update the ACRE website’s written descriptions of the election security to incorporate the policy resulting from R1 on the security of election communications in addition to the current focus on security of (a) registration, (b) vote casting, and (c) results tabulation. ACRE should implement this recommendation by June 30, 2020. Protect the County’s Email R3. Prevent Spoofing with DMARC: ISD, CMO, and ACRE should improve email security for employees involved in election announcements by configuring and enabling DMARC for at least the smcacre.org and smcgov.org domains. ISD, CMO, and ACRE should implement this recommendation by June 30, 2020. R4. Combat ACRE Email Account Phishing with FIDO Keys: ACRE should provide FIDO physical security keys to each of its permanent elections employees and require the use of those FIDO keys as part of their multi-factor authentication for accessing their County email accounts. ACRE should implement this recommendation by December 31, 2019. R5. Combat Other Email Account Phishing with FIDO Keys: ACRE should identify County employees outside of ACRE that have a role in election announcements (e.g., Chief Communications Officer, senior ISD employees, etc.) and ask that the departments of the identified employees provide FIDO physical security keys to each of the identified employees and require the use of those FIDO keys as part of their multi-factor authentication for accessing their County email accounts. ACRE should complete this recommendation by December 31, 2019. Protect ACRE’s Website R6. Combat Website Account Phishing with FIDO Keys: ACRE should require all County employees whose user accounts allow them to alter the ACRE website to use FIDO physical security keys as part of their multi-factor authentication. ACRE should implement this recommendation by December 31, 2019. R7. Combat Island Hopping with FIDO Key Vendor Requirement: ACRE and ISD should require employees and contractors of any vendor that hosts the ACRE website to use FIDO physical security keys as part of their multi-factor authentication. ACRE and ISD should implement this recommendation by December 31, 2019. Protect the Social Media Accounts R8. Stop Sharing Social Media Account Passwords: ACRE and CMO should implement procedures whereby communications staff manage official County social media accounts with multi-user administration, and no employees share social media account passwords. ACRE and CMO should implement this recommendation by October 31, 2019. R9. Request FIDO Key Feature If Not Available: ACRE and CMO should jointly draft and send a FIDO-key feature request citing this report to the social media companies used by the County to broadcast election announcements, but that do not currently offer FIDO account security protections—especially Instagram and Nextdoor. ACRE and CMO should implement this recommendation by August 31, 2019. R10. Combat ACRE Social Media Account Phishing with FIDO Keys: ACRE should require any employee social media accounts capable of administering the official ACRE social media pages listed in Table 1 to use FIDO physical security keys as part of their multi-factor authentication. ACRE should implement this recommendation by December 31, 2019. R11. Combat SMC Social Media Account Phishing with FIDO Keys: CMO should require any employee social media accounts capable of administering the official San Mateo County social media pages listed in Table 1 to use FIDO physical security keys as part of their multi-factor authentication. CMO should implement this recommendation by December 31, 2019. Improve Cyber Hygiene R12. Coordinate Election Security with Interdepartmental Working Group: ACRE and ISD should create an election security working group that meets periodically and is responsible for evaluating and improving the security of elections (a) registration, (b) vote casting, (c) results tabulation, and (d) communication within San Mateo County. ACRE and ISD should implement this recommendation by December 31, 2019. R13. Evaluate Free DHS Elections Security Assistance Programs: ACRE and ISD election-security working group should evaluate the benefits of having all members of the election-security working group participate in any of the free DHS elections security assistance programs listed in Table 2. ACRE and ISD should implement this recommendation by February 3, 2020. R14. Offer Behavioral Cyber Hygiene Audits: ISD and the County Controller’s Office should develop a behavioral auditing program consisting of sampling the day-to-day routines and security practices of employees, contractors, and/or vendors and offer to audit each department within the County periodically to (1) evaluate compliance with existing cyber hygiene policies and (2) provide proactive advice on cyber hygiene improvements that could inform new policies. ISD and the Controller’s Office should begin to implement this recommendation by offering to audit ACRE and ISD (itself) in time to finish by February 3, 2020. 15 Security of Election Announcements, continued RESPONDING AGENCY REC A O P M PL M I E C N A D B A L T E I ON RESPONSE FOL Y L E O A W R UP R1 N/A R2 N/A R3 Will implement by June 30, 2020. Currently under analysis; recommendation R4 by December 31, 2019, implementation 2020-21 (based on recommendation) to follow. Requires further analysis by ISD by R5 2020-21 December, 2019. R6 Will implement by December 13, 2019. San Mateo County R7 Will implement by December 13, 2019. Board of Supervisors R8 Will implement by October 31, 2019. R9 Implemented. Will be implemented by December 31, R10 2019. Will be implemented by December 31, R11 2019. R12 Implemented. R13 Will be completed by October 31, 2019. Will be implemented by December 31, R14 2019. Will implement in coordination with R1 SMC, ISD, and vendor. R2 Will implement. Will implement in coordination with ISD, R3 and County Manager’s Office. R4 Will coordinate with ISD implementation. Will implement based on analysis 2020-21 R5 (December 31, 2019) and solution recommended by ISD. R6 Will implement using a form of MFA. San Mateo County R7 Will implement using a form of MFA. Assessor-County Clerk- Recorder and Elections R8 Will implement in coordination with the County Manager’s Office. (ACRE) Will be implemented by September 27, R9 2019. Will be implemented after coordination R10 with ISD by December 31, 2019. Will be implemented following guidance R11 of the County Manager’s Office by December 31, 2019. R12 Implemented. R13 Will be completed by October 31, 2019. R14 Will implement by February 3, 2020. R1 N/A R2 N/A San Mateo County R3 N/A Controller R4 N/A R5 N/A R6 N/A 16 Security of Election Announcements, continued RESPONDING AGENCY REC A O P M PL M I E C N A D B A L T E I ON RESPONSE FOL Y L E O A W R UP R7 N/A R8 N/A R9 N/A R10 N/A R11 N/A R12 N/A R13 N/A R14 Will implement in cooperation with ISD. 17 Wildfire Risk and Response in San Mateo County R1. In order to expand the number of county residents receiving emergency notifications, the San Mateo County Office of Emergency Services should use the contact information of utility companies within six months of receiving guidance on implementing SB 821 from the California Office of Emergency Services. R2. The San Mateo County Office of Emergency Services should use utility contact information to distribute information on emergency response plans in advance of an emergency to the extent permitted under SB 821. R3. The San Mateo County Fire Department, working with individual fire agencies, should develop fire preparedness brochures that include maps of alternative evacuation routes from their respective communities (similar to the example in Appendix B) by June 30, 2020. R4. The San Mateo County Fire Department should produce a website containing the brochures recommended in R3 by June 30, 2020. R5. Periodically, beginning July 2020, the San Mateo County Office of Emergency Services should distribute emergency plans including links to maps with alternative evacuation routes with property tax bills. R6. The County Tax Collector should include a one-page insert on emergency response to a wildfire with property tax bills periodically, beginning July 2020. R7. The San Mateo County Office of Emergency Services should explore the possibility of providing advance information on alternative evacuation routes in a visual online format, such as the “crisis maps” feature in Google by June 30, 2020. RESPONDING AGENCY REC A O P M PL M I E C N A D B A L T E I ON RESPONSE FOL Y L E O A W R UP R1 N/A R2 N/A Will implement. No date provided. R3 Follow-up sent with no response. San Mateo County Will implement. No date provided. Board of Supervisors R4 Follow-up sent with no response. R5 N/A R6 N/A R7 N/A – refer to SMCSO response. Will be implemented, but timeframe R1 unclear. 2020-21 Will not implement per SB 821 R2 restrictions. R3 N/A R4 N/A San Mateo County Will not be implemented but the OES is Sheriff’s Office R5 working on a county-wide fire evacuation project. R6 N/A Will not be implemented. OES continues to work with fire agencies R7 throughout the County on a county-wide fire evacuation project. R1 N/A R2 N/A R3 N/A San Mateo County R4 N/A Tax Collector Agrees with the finding, can implement if R5 2020-21 OES provides the information. Agrees with the finding, can implement if R6 2020-21 OES provides the information. R7 N/A 18 APPENDIX B: SUMMARY OF RESPONSES TO THE 2017-2018 SAN MATEO COUNTY CIVIL GRAND JURY FOLLOW-UP REPORTS Soaring City Pension Costs – Follow-up on Grand Jury Report of 2017-2018 R1. Each City include in its published annual or bi-annual budgets a general fund operating budget forecast for the next ten fiscal years. R2. Each City include a report in its published annual or bi-annual budgets specifically setting forth the dollar amounts of its annual pension costs paid to CalPERS. The report should include the following: a) The City’s total pension contribution costs under all plans, for each of the three preceding fiscal years as well as estimates for such costs in each of the following ten fiscal years (whether developed by City staff internally, or by outside consultants to the City), assuming CalPERS’ actuarial assumptions are met. b) The City’s total Unfunded Liabilities under all plans, for each of the three preceding fiscal years as well as estimates for such Unfunded Liabilities in each of the next ten fiscal years, (whether developed by City staff internally, or by outside consultants to the City), assuming CalPERS’ actuarial assumptions are met. c) The City’s Funded Percentage across all plans, for each of the three preceding fiscal years as well as estimates for such Funded Percentages in each of the next ten fiscal years, assuming CalPERS’ actuarial assumptions are met. d) The percentage of the City’s general fund expenditures, and the percentage of the City’s covered payroll, represented by the pension costs described in (a) above (using estimates of general fund expenditures in future fiscal years). RESPONDING AGENCY REC A O P M PL M I E C N A D B A L T E I ON RESPONSE FOL Y L E O A W R UP Will not implement as using different R1 Town of Atherton method. R2 Will not implement. Will not implement – not warranted or R1 City of Belmont reasonable. R2 Will not implement – cost burdensome. Will consider implementation starting July 2020-21 R1 City of Brisbane 2020. R2 Will implement. Will not implement as using different R1 method. City of Burlingame Will not implement – disagrees with R2 method. R1 Implemented. Town of Colma R2 Will implement in FY 2020-2021 budget. 2021-22 R1 Will implement in FY 2021-2022 budget. 2021-22 City of Daly City R2 Will implement in FY 2021-2022 budget. 2021-22 No response. Follow-up sent with no R1 response. City of East Palo Alto No response. Follow-up sent with no R2 response. Will not implement at this time - may R1 reconsider. City of Foster City Will not implement – using different R2 method. R1 Will not implement – not reasonable. City of Half Moon Bay R2 Will be implemented in FY 2021 budget. 2021-22 R1 Implemented. Town of Hillsborough R2 Will not be implemented – too expensive. 19 Soaring City Pension Costs – Follow-up on Grand Jury Report of 2017-2018, continued RESPONDING AGENCY REC A O P M PL M I E C N A D B A L T E I ON RESPONSE FOL Y L E O A W R UP R1 Implemented. City of Menlo Park R2 Will be implemented in FY 2021 budget. 2021-22 R1 Implemented. City of Millbrae R2 Implemented. R1 Implemented. City of Pacifica R2 Implemented. Will be implemented in FY 2021-2022 R1 2021-22 budget. Town of Portola Valley Will be implemented in FY 2021-2022 R2 2021-22 budget. R1 Implemented. City of Redwood City Will be implemented in FY 2020-2021 R2 2021-22 budget. Will not implement; city uses 5-year R1 financial forecast. City of San Bruno Will not implement; city uses 5-year R2 financial forecast. R1 Will be implemented in next budget cycle. 2020-21 City of San Carlos R2 Will not be implemented – not reasonable. R1 Implemented. City of San Mateo Will be implemented in FY 2021-2022 R2 2021-22 business plan. Will be implemented in FY 2021-2023 R1 2021-22 budget. City of South San Francisco Will not be implemented-already included R2 in regular reports. R1 Implemented. Town of Woodside R2 Will implement in next annual budget. 20