Cybersecurity Grant Program Agreement

Home Browse Search

Attachment D WORK PLAN FY 2023 State and Local Grant Proqram PROJECT #X TITLE Kittitas County Emergency Management is submltting this application on behalf of Kittitas County, At a hlgh level, this appllcation outlines the cybersecurity needs based on assessments, audits, and evaluations of current systems. Our projects lnclude the needs for off-site lmmutable backup, moblle and laptop device management, penetration testing, and a program deslgned to detect, analyze, and respond to security threats of government data. Already in use in Kittitas County is moblle device management on a very small and basic level. By upgrading our systems to include managing mobile data more in depth as well as introducing laptop device management, we are building upon our system to reach cybersecurity best practices. Kittitas County also currently has an immutable backup systern, however, making that system off-site would add a new level of security. To continue building upon best practices and security measures ln place, our project includes lntegrating a SIEM system that enables our lT professionals to efficiently identify breaches and threats to our county network uslng a logglng system which we do not currently have. As our lT professionals have collaborated, the lmplementation of these projects would be a stakeholder approach for interoperabllity and maximal beneflt to all agencies. This grant would specifically pay for the installatlon of Rubrik, an offsite backup solution, or similar, and to purchase Fortigate network firewalls, or similar, to improve our VPN security. Thls would leverage the use of our Yubikeys for remote users to VPN. This ls the flrst step towards Uslng the NCSR and CllS security systems yearly assessments, it was identlfied for best practlce purposes to implement an off-site immutable backup system for disaster recovery ln additlon to the backup system currently ln place, Utllizing the most recent CISA audlt, it was suggested to enhance penetration testlng being used by stakeholders to ensure conslstent and periodlc phishing tests occur for cybersecurity safety. To contlnue to build on systems ln place and close security gaps, a SIEM system would provide us with security logs to allow our lT professionals to add a "fast and efficient" element to identifylng threats to our systems. Through devlce management/ we can ensure device health and compliance wlth all network cellphones and la instead of just some capa reats to protect nt data. as en ma m on be able to enforce Yubi MFA for remote users. IMPACT Glving our stakeholders the means to expedite an off-site immutable backup system would vastly increase our whole county's ability to recover from an event in which a catastrophic incident impacts the location where the backup servers are currently being held. Long term sustainment of the SIEM will be planned for as well as the annual backup and maintenance costs. ln the case of the mobile and laptop management program purchase, our lT professionals would be able to conduct granulated control of updates and security measures over county owned electronics to include laptops, a capabllitythey do not currently have, outside the county network. This program is subscriptlon based, wlth the plan to put the subscription in the annual county budget moving forward with our plan of compllance with best practices. Security information and event management (SIEM) would provlde the capabllity to save all logs from every device on the county network to a database that enables lT to identlfy breaches and threats to the system much faster than they can right now. Budgeting in the future after the initial costs from the grant also includes renewals and support for the logging and penetration programs. This grant will assist in accelerating protectlon against security vulnerabiltty by injecting the needed funding now instead of trickllng the funding ln over the next few ln 202L, Kittltas County lT had penetratlon testing done by a third-party vendor that hlghliehted concerns that could be addressed wlth this grant fundlng. The test findings included Kittltas County scoring at the highest risk level ln access and control and lifecycle management, which ls an issue that could be resolved by the devlce management piece of this project. Another finding included Klttitas County scoring at a mid-range risk level for detection and investigatlon, whlch SIEM would directly focus on. When the project is complete, our lT professionals to have DHS-FEMA-SLCGP-FY23 Page 35 of 39 Kittitas County Sheriff's Office, E25-313