Title
An Ordinance accepting the State and Local Cybersecurity Grant Program award in the amount of $35,272.80 from the Missouri Department of Public Safety Office of Homeland Security for the review and development of necessary policies and training plans for the City of Lee's Summit, Missouri.
Body
Issue/Request:
Staff is seeking approval of a grant award from the State of Missouri Department of Public Safety Office of Homeland Security for the purpose of reviewing and improving its existing policies and training plans.
Key Issues:
-Cybersecurity is an ever-growing concern for local governments.
-Federal agencies, Like the Cybersecurity and Infrastructure Security Agency (CISA), and the National Institute of Standards and Technology (NIST) have developed recommended policy sets for cybersecurity.
-The city has many, nut not all of the necessary policies in place, and some existing policies need to be updated.
-Through the grant, The City intends to contract with an outside consultant to assist the city in the review and develop of its Cyber Security policy set.
-A detailed position specific training plan for ITS staff will be developed
-The grant award must be accepted and executed by March 21, 2023.
Proposed City Council Motion:
I move for adoption of an ordinance of the City Council of the city of Lee's Summit, Missouri accepting the State and Local Cybersecurity Grant Program award in the amount of $35,272.80 from the Missouri Department of Public Safety Office of Homeland Security for the review and development of necessary policies and training plans.
Background:
The City of Lee's Summit IT Division as part of its responsibilities creates and maintains policies related to the City’s technology infrastructure, and its use. Cybersecurity falls in this area. The area of cyber security evolves rapidly, and the need to review, update, and add policies is ever-present. To get us to a place where our polices and position training requirements are up to date, it was determined that an outside consultant would be necessary to assist ITS with the work. A grant submission seeing funding for the consulting work was submitted in December of 2022.
The purpose of the Fiscal Year 2022 State and Local Cybersecurity Grant Program (SLCGP) is to assist state, local, and territorial (SLT) governments with managing and reducing systemic cyber risk. Through funding from the Infrastructure Investment and Jobs Act, also known as the Bipartisan Infrastructure Law, the SLCGP enables DHS to make targeted cybersecurity investments in SLT government agencies, thus improving the security of critical infrastructure and improving the resilience of the services SLT governments provide their community.
Specifically, the grant will allow the city to:
1. Improve the existing incident response plan into a CISA approved Incident Response Plan.
2. Get assistance organizationally developing a Business Recovery/Business Resumption Plan.
3. Review and update the existing data breach plan/policy.
4. Develop a policy setting cyber security training expectations based on the NICE framework.
5. Development of a data classification scheme/policy.
6. Policy establishing baseline configurations
7. Development of a plan/policy/program describing vulnerability management
The grant is awarded through the Missouri Department of Public Safety Office of Homeland Security, with funding provided by the federal government from the Fiscal Year 2022 Infrastructure and Jobs Investment Act
Timeline:
Start: December 1, 2022
Finish: November 30, 2025
Presenter
Stephen L. Marsh, Chief Technology Officer