DATE:
January 18, 2022
TO:
Mayor and Council Members
Chair and Board Members, Hesperia Water District
FROM:
Nils Bentsen, City Manager
BY:
Casey Brooksher, Director of Administrative Services
Victor Knight, Economic Development Manager
SUBJECT:
Network Security Detection and Response Services
RECOMMENDED ACTION
It is recommended that the City Council and Board of Directors of the Hesperia Water District authorize the City Manager to enter into a three (3) year agreement with Kroll, LLC (Kroll) in an amount not-to-exceed $78,000, to actively monitor the City’s network for cybersecurity intrusions and provide remediation.
BACKGROUND
The City’s existing cybersecurity measures provide a moderate level of protection against cybersecurity attacks and prevention; however, improvement can be made utilizing a third party service.
Augmenting existing measures with security analyst expertise and monitoring the City’s network activity 24 hours a day, seven days a week will further ensure the City’s security, integrity and ability to operate un-interrupted.
ISSUES/ANALYSIS
Kroll would provide the City with a security operation center staffed with security professionals that are able to respond to potentially malicious behavior at all hours. In the City’s current state, attacks that are executed against the City during off hours do not always receive an immediate response, and analysis by a security analyst is not a resource that can be deployed.
In the case of a potential cyberattack, Kroll’s security analysts will review City network activity using third party software licensed through Kroll. If suspicious activity is observed, Kroll security analysts will remotely triage, investigate, and respond using the third party software in an effort to contain and remediate identified threats on actively monitored servers and devices. The City would then be notified of the incident and following analysis by Kroll. Kroll will provide the City with a description of actions taken to stop an attack and provide guidance on how to prevent similar attacks if applicable.
FISCAL IMPACT
Funding from budgetary savings in the Fiscal Year (FY) 2021-22 Budget will be utilized. Prospectively, annual funding of $26,000 will be included in the annual budget by staff for the duration of the contract (FY 2022-23 through FY 2023-24).
ALTERNATIVE(S)
Provide alternative direction to staff.
ATTACHMENT(S)
None
City of Hesperia STAFF REPORT City of Hesperia STAFF REPORT City of Hesperia
STAFF REPORT
City of Hesperia
STAFF REPORT
Staff Report to the City Council and Hesperia Water District Board Members Network Security Detection and Response Services
January 18, 2022