Laserfiche WebLink
6.D. - Page 33 of 33 <br />anywhere in the world. Multi -factor authentication is one of the predominant methods of securing <br />access from outside our firewalls. <br />R2. These confidential internal reports should be provided to the governing body by June 30, 2021. <br />This report should describe what actions have already been taken and which will be given timely <br />consideration for future enhancements to the existing cybersecurity plan. <br />City response: The recommendation is partially implemented through the creation of this response, <br />which provides to the City's governing body a high level look at City cyber security policies and <br />procedures without providing explicit details publicly. Staff will also offer confidential briefings to City <br />Councilmembers prior to June 30, 2021 regarding the City's cybersecurity measures. <br />R3. Given the results of their internal reports, governmental entities may choose to request further <br />guidance by means of a Cybersecurity review from the U.S. Department of Homeland Security and/or <br />a cyber hygiene assessment from the County Controller's Office. <br />City response: This recommendation will be further analyzed by City staff as to whether one or both of <br />the recommended assisting agencies, the Department of Homeland Security and/or the County <br />Controllers Office, are the preferred fit for the City and what resources will be needed in order to <br />consult with them. This analysis will inform the City Manager's fiscal year 2021-22 budget. <br />R4. Given the results of their internal reports, governmental entities may choose to ask their IT <br />departments to review their own Cybersecurity Plan with the detailed template provided by the FCC's <br />Cybersecurity Planning Guide and consider customizing it using FCC's Create Custom Cybersecurity <br />Planning Guide tool (see footnote 52). <br />City response: City staff proposes to undertake an analysis of the level of effort required to convert its <br />current cyber security documentation into a more formal, single source Cybersecurity Plan using the <br />FCC's Cybersecurity Planning Guide as a template. If additional resources are required, staff may seek <br />funding in the City Manager's proposed Fiscal Year 2021-22 budget. <br />Sincerely, <br />Diane Howard <br />Mayor <br />154 <br />