TO: Mayor and Commission AGENDA DATE: 2/5/2024
FROM: Interim City Manager AGENDA ITEM: 11 - A
SUBJECT:
Title
Request to adopt the National Institute of Standards and Technology Cybersecurity Framework - Robert Cordero, IT Department (386) 878-8807.
Strategic Goal: Effective Governance and Productive Government
Body
LOCATION:
Citywide
COST:
N/A - No cost
SOURCE OF FUNDS:
N/A
ORIGINATING DEPARTMENT:
Information Technology Services Department
STAFF RECOMMENDATION PRESENTED BY:
Robert Cordero, IT Director
POTENTIAL MOTION:
Recommendation
“I move to approve the adoption of the National Institute of Standards and Technology Cybersecurity Framework for the City of Deltona.”
END
BACKGROUND:
Background
Florida Statute 282.3185 (4) (a) states: Each local government shall adopt cybersecurity standards that safeguard its data, information technology, and information technology resources to ensure availability, confidentiality, and integrity. The cybersecurity standards must be consistent with generally accepted best practices for cybersecurity, including the National Institute of Standards and Technology Cybersecurity Framework. (b) Each county with a population of 75,000 or more must adopt the cybersecurity standards required by this subsection by January 1, 2024.
In 2023, the City was awarded a grant by the state that provided us funding to help us comply with the Florida Statute. The IT department is still implementing those solutions and are looking to achieve a stronger security posture. In that regards, the City has begun working towards NIST CSF 2.0 compliance. This particular framework is an acceptable standard in the industry and is being adopted by other municipalities nationwide. It is an excellent benchmark to measure our cybersecurity program. In December we began the process and determining the criteria to achieve compliancy with the framework. Initially, the City will bring in an auditor that will determine the changes needed for full compliancy with administrative, and technical controls. This resolution will provide the state a commitment from the City to work towards full compliance and a stronger more secure City.
End