CITY OF MANTECA
GARY SINGH, MAYOR
CHARLIE HALFORD, COUNCILMEMBER
DAVID BREITENBUCHER, COUNCILMEMBER DISTRICT 3
MIKE MOROWIT, COUNCILMEMBER DISTRICT 4
December 6, 2022
Honorable Xapuri B. Villapudua, Presiding Judge
Superior Court of California, County of San Joaquin
180 East Weber Street, Suite 1306J
Stockton, California 95202
Re: Grand Jury Report – San Joaquin County and Its Seven Cities: Cybersecurity: Local Defense Against a Global Threat Case #0321 To the Honorable Judge Villapudua:
This letter responds to the above-referenced Grand Jury Report in accordance with California Penal Code sections 933 and 933.05. The City Council for the City of Manteca (the “City”) and City staff have thoroughly reviewed the findings and recommendations, and considered the Grand Jury Report in its totality. The City Council for the City of Manteca (“City Council”) has approved the responses contained in this letter at its council meeting of December 6, 2022.
5.0 – City of Manteca-Discussion
Findings
FS.1 – The City of Manteca has an Information Technology Security Policy which has not been updated since 2010, leaving the City relatively unprepared for a cyber event.
City’s Response: The City agrees with this finding in part; while the City’s policy has not been updated since 2010, the City has undertaken other security measures and trainings to stave off a cyber-event.
FS.2 – The City of Manteca lacks a policy and procedure for ransomware attacks. This absence of policy could cause confusion, delay, and greater loss of security in the event of such an attack.
City’s Response: The City agrees with this finding in part; though the City does not have a formal policy, IT staff is trained and capable to deal with a cyber-event.
FS.3 – The City of Manteca has a significant number of security devices with single power supplies. This lack of redundant power presents vulnerability in major or prolonged power outages.
City’s Response: The City agrees with this finding.
Recommendations
RS.1 – By January 1, 2023, the Manteca City Council, in conjunction with the City's ISO, develop, approve and implement an updated Information Technology Security Policy.
City’s Response: This recommendation will be completed by January 1, 2023.
RS.2 – By January 1, 2023, the Manteca City Council, in conjunction with the City's ISO, develop, approve and implement a confidential policy and procedure for response to a ransomware attack.
City’s Response: The City will implement this recommendation on or before March 1, 2023.
RS.3 – By March 1, 2023, the Manteca City Council, in conjunction with the City's ISD, develop, approve and adopt an updated timeline to replace single-powered units with dual-powered or redundant-powered units in their network architecture.
City’s Response: All critical network architecture have been updated with redundant-powered units. ***
Thank you for your efforts that resulted in your report and recommendations. The City will move forward consistent with the actions set out in this letter.
Sincerely,
Gary Singh
City of Manteca Mayor
1001 W. Center Street, Manteca, CA 95337 | (209) 456-8017 | www.mantecagov.com ATTACHMENT 2