Marin County Grand Jury • 2024-2025 • Agency Response
Response to: Cyberattacks: A Growing Threat to Marin Government

And Rod Kerr, Foreperson Marin County Civil Grand Jury*

Published: August 19, 2024 4 pages
Ver PDF original

Findings and Recommendations 6 findings

F1
Contracts for Information Technology, Information Systems, and Cybersecurity services between third-party providers and Marin County governmental agencies should contain a Business Continuity clause, or other language, protecting that agency from a sudden cessation of services provided by the third-party provider Response: We agree with the finding.
Related Recommendations (1)
R1
Recommendations numbered have been implemented. (Attach a summary describing the implemented actions.)
F2
Marin County municipalities should have current, written contracts with third-party providers of Information Technology, Information Systems, and Cybersecurity services, and should not continue to use those providers' services without a current contract. Response: We agree with the finding.
No recommendations for this finding
F3
Membership in insurance risk pools provides the benefits of cybersecurity assessments and audits, which highlight cybersecurity deficiencies and make suggestions for improvement. Response: We agree with the finding.
No recommendations for this finding
F4
Having a completed, adopted and regularly updated cybersecurity plan helps ensure that all staff within a government agency are working together to optimize that organization's cyber preparedness and security. Response: We agree with the finding.
No recommendations for this finding
F5
Joint Powers Authorities in Marin County exist to provide more efficient and cost-effective services to the people of Marin. Response: We agree with the finding.
No recommendations for this finding
F6
The current County Collective Bargaining Agreements prevent the Marin County Department of Information Systems & Technology from unilaterally negotiating managed service agreements (outsourcing work to third parties). Response: We partially disagree with this finding. It is not within the Town of Ross's realm of responsibility to agree or disagree with this finding. The County's collective bargaining agreements are the responsibility of the County of Marin. Town of Ross Response to Grand Jury Report, dated May 17, 2024, titled "Cyber Preparedness: Are We There Yet?" RESPONSE TO GRAND JURY RECOMMENDATIONS
Related Recommendations (1)
R6
Recommendations numbered have not yet been implemented, but will be implemented in the future. (Attach a timeframe for the implementation.) Recommendations numbered N/A require further analysis. (Attach an explanation and the scope and parameters of an analysis or study, and a timeframe for the matter to be prepared for discussion by the officer or director of the agency or department being investigated or reviewed, including the governing body of the public agency when applicable. This timeframe shall not exceed six months from the date of publication of the grand jury report.) Recommendations numbered N/A will not be implemented because they are not warranted or are not reasonable. (Attach an explanation.) Date: 3/9/24 Signed: 6 82 12 2 Number of pages attached: Z Town of Ross Response to Grand Jury Report, dated May 17, 2024, titled "Cyber Preparedness: Are We There Yet?" RESPONSE TO GRAND JURY FINDINGS

* This report's PDF did not contain easily extractable text and required Optical Character Recognition (OCR) for analysis. There may be minor errors in the extracted findings and recommendations due to OCR limitations with scanned documents.