FFY23 SLCGP (E25-313) Cypbersecurity Grant contract partially signed

Home Browse Search

Attachment D WORK PLAN FY 2023 State and Local Cybersecurity Grant Program PROJECT #1 TITLE I Multi -Jurisdictional Cyber Security Assessment and Mitigation PROJECT DESCRIPTION Kittitas County Emergency Management is submitting this application on behalf of Kittitas County. At a high level, this application outlines the cybersecurity needs based on assessments, audits, and evaluations of current systems. Our projects include the needs for off -site immutable backup, mobile and laptop device management, penetration testing, and a program designed to detect, analyze, and respond to security threats of government data. Already in use in Kittitas County is mobile device management on a very small and basic level. By upgrading our systems to include managing mobile data more in depth as well as introducing laptop device management, we are building upon our system to reach cybersecurity best practices. Kittitas County also currently has an immutable backup system, however, making that system off -site would add a new level of security. To continue building upon best practices and security measures in place, our project includes integrating a SIEM system that enables our IT professionals to efficiently identify breaches and threats to our county network using a logging system which we do not currently have. As our IT professionals have collaborated, the implementation of these projects would be a stakeholder approach for interoperability and maximal benefit to all agencies. This grant would specifically pay for the installation of Rubrik, an offsite backup solution, or similar, and to purchase Fortigate network firewalls, or similar, to improve our VPN security. This would leverage the use of our Yubikeys for remote users to VPN. This is the first step towards being able to enforce Yubikey MFA for remote users. GAP BEING ADpRESSED _— - - - - - - - Using the NCSR and CAS security systems yearly assessments, it was identified for best practice purposes to implement an off -site immutable backup system for disaster recovery in addition to the backup system currently in place. Utilizing the most recent CISA audit, it was suggested to enhance penetration testing being used by stakeholders to ensure consistent and periodic phishing tests occur for cybersecurity safety. To continue to build on systems in place and close security gaps, a SIEM system would provide us with security logs to allow our IT professionals to add a "fast and efficient" element to identifying threats to our systems. Through device management, we can ensure device health and compliance with all network cellphones and laptops, instead of just some cellphones, as well as advanced en point management capabilities for mitigation of cyberthreats to protect ment data. IMPACT Giving our stakeholders the means to expedite an off -site immutable backup system would vastly increase our whole county's ability to recover from an event in which a catastrophic incident impacts the location where the backup servers are currently being held. Long term sustainment of the SIEM will be planned for as well as the annual backup and maintenance costs. In the case of the mobile and laptop management program purchase, our IT professionals would be able to conduct granulated control of updates and security measures over county owned electronics to include laptops, a capability they do not currently have, outside the county network. This program is subscription based, with the plan to put the subscription in the annual county budget moving forward with our plan of compliance with best practices. Security information and event management (SIEM) would provide the capability to save all logs from every device on the county network to a database that enables IT to identify breaches and threats to the system much faster than they can right now. Budgeting in the future after the initial costs from the grant also includes renewals and support for the logging and penetration programs. This grant will assist in accelerating protection against security vulnerability by injecting the needed funding now instead of trickling the funding in over the next few years. In 2021, Kittitas County IT had penetration testing done by a third -party vendor that highlighted concerns that could be addressed with this grant funding. The test findings included Kittitas County scoring at the highest risk level in access and control and lifecycle management, which is an issue that could be resolved by the device management piece of this project. Another finding Included Kittitas County scoring at a mid -range risk level for detection and investigation, which SIEM would directly focus on. When the project is complete, our IT professionals expect to have DHS-FEMA-SLCGP-FY23 Page 36 of 39 Kittitas County Sheriff's Office, E25-313