OFFICE OF THE CITY MANAGERCity Hall 425 N. El Dorado Street Stockton, CA 95202-1997 209 / 937-8212 Fax 209 / 937-7149www.stocktonca.gov
OFFICE OF THE CITY MANAGER
City Hall 425 N. El Dorado Street Stockton, CA 95202-1997 209 / 937-8212 Fax 209 / 937-7149 www.stocktonca.gov
September 14, 2022
Honorable Michael D. Coughlan, Presiding Judge
San Joaquin County Superior Court
180 E. Weber Avenue, Suite 1306J
Stockton, CA 95202
CITY OF STOCKTON RESPONSE TO SAN JOAQUIN COUNTY GRAND JURY 2021-2022 CASE NO. 0321 SAN JOAQUIN COUNTY AND ITS SEVEN CITIES: CYBERSECRUITY: LOCAL DEFENSE AGAINST A GLOBAL THREAT___________ The City of Stockton received the Grand Jury Report on June 16, 2022, regarding findings and recommendations related to Cybersecurity in San Joaquin County and the seven incorporated cities within the county. In general, the City agrees with the findings and is providing additional information in the below responses to the findings and recommendations.
In accordance with Sections 933 and 933.05 of the California Penal Code, the City Council of the City of Stockton offers the following responses to the Grand Jury Report on the above-referenced case. As referenced under Response Requirements, the Stockton City Council is responding to the Findings and Recommendations F7.1, F7.2, and R7.1.
Findings:
F7.1 The City of Stockton does not have a formal internal policy concerning payments or procedures in ransomware attacks. This absence of policy could cause confusion, delay and greater loss of security in the event of an attack.
RESPONSE:
The City agrees with this finding.
F7.2 The City of Stockton has a large IT Department which places cybersecurity and disaster preparedness at a high priority, minimizing risk to the City’s information and service systems.
RESPONSE:
The City agrees with this finding.
Recommendations:
R7.1 By November 1, 2022, the Stockton City Council, in conjunction with the City’s IT department, develop, adopt and implement a formal internal policy and procedure for response to a ransomware attack.
RESPONSE:
A formal internal policy and procedure for response to a ransomware attack was approved by the City Manager on September 1, 2022, and presented to the City Council at its September 13, 2022 public meeting. The approved policy is attached.
HARRY BLACK
CITY MANAGER
Attachment
The Pun Group, LLP
Management Representation Letter
Honorable Michael D. Coughlan, Presiding Judge ATTACHMENT B September 14, 2022
ATTACHMENT B