Title
Cybersecurity Audit 2025
History
In 2021 the Village issued RFP 21-044 for a full Cybersecurity Assessment along with a Network Security Monitoring/Help Desk Managed Services. The Cybersecurity Assessment was awarded to Securance and was completed at the end of 2022. Since the last cybersecurity audit was completed there have been a number of security policy changes with Criminal Justice Information Services (CJIS) and the National Institute of Standards and Technology (NIST) and to ensure the Village is meeting the updated standards another cybersecurity audit is recommended. The Village does periodic external penetration tests so the focus on the proposed audit is in internal cybersecurity and controlls. The Village reached out for a number of quotes and received responses from Securance Consulting and Sentinel Technologies (Fortis), see attached quotes and statements of work for details. Sentinel Technologies quoted $41,302 and Securance Consulting quoted $57,344 for the cybersecurity audit.
Recommended Action/Motion
We are looking for the Technology Commission to provide guidance on which service provider should conduct the cybersecurity audit based on their statements of work.