Laserfiche WebLink
6.D. - Page 21 of 33 <br />F5. A comprehensive Cybersecurity plan should include, at a minimum, information <br />concerning prevention steps, spam and malware software, and backups and full recovery <br />testing. <br />F6. The identification of phishing attempts, including the use of spam filters, is an important <br />component to protecting an IT system from Ransomware attacks. <br />F7. Testing a full restore of a server to ensure that backups are reliable should be undertaken <br />regularly as part an entity's backup plan to recover lost information. <br />F8. Training of new employees, and the recurring training of existing employees, is an <br />important component of defense against Ransomware. <br />RECOMMENDATIONS <br />The Grand Jury recommends that each governing body undertake its own confidential effort to <br />protect against Ransomware attacks. Specifically: <br />R 1. Each of the governmental entities in San Mateo County with an IT department or IT <br />function (whether in-house, handled by another government unit or outsourced to a private <br />enterprise) as listed in Appendix F, should by November 30, 2020, make a request for a <br />report from their IT organization that addresses the concerns identified in the report, <br />specifically: <br />1. System Security (Firewalls, Anti-malware/Antivirus software, use of subnets, strong <br />password policies, updating/patching regularly) <br />2. Backup & Recovery (In the event of an attack, can you shut down your system quickly? <br />What is being backed up, how it is being backed up, when are backups run, and where are <br />the backups being stored? Have backups been tested? Can you fully restore a Server <br />from a backup?) <br />3. Prevention (turning on email filtering, setting up message rules to warn users, providing <br />employee training on phishing and providing a reporting system to flag suspect content) <br />R2. These confidential internal reports should be provided to the governing body by June 30, <br />2021. This report should describe what actions have already been taken and which will be <br />given timely consideration for future enhancements to the existing cybersecurity plan. <br />R3. Given the results of their internal reports, governmental entities may choose to request <br />further guidance by means of a Cybersecurity review from the U.S. Department of <br />Homeland Security56 and/or a cyber hygiene assessment from the County Controller's <br />Office.57 <br />56 Itttps;/Iwww. «s-cein.2ov/resources/assessments <br />57 2018-2019 San Mateo Grand Jury Report — Security of Election Announcements <br />2019-2020 San Mateo County Civil Grand Jury 13 <br />142 <br />