Newsletter

Expanded Cybersecurity Resources Available to Members

Following a successful partnership with Triden Group and strong member participation in the Authority’s cybersecurity assessment services, we are expanding cybersecurity resources for members.

Cybersecurity assessments have helped members identify practical areas for improvement, including patch management, incident response planning, vulnerability management, backup practices, and employee security awareness. Several members have also used their assessment results to pursue follow-up work, including advisory support, tabletop exercises, penetration testing, network upgrades, managed detection and response, backup improvements, employee security awareness training, and IT governance support.

Read More

Beginning July 1, members will have access to fully funded cybersecurity tabletop exercises, facilitated by Triden Group. These exercises are designed to help agencies test their response procedures, clarify roles and responsibilities, identify communication gaps, and practice decision-making before an actual cyber event occurs. Tabletop exercises may be conducted at the executive or technical level, depending on the member’s needs. These findings reinforced the value of regular assessments and hands-on exercises that allow agency staff to walk through how they would respond during a cyber incident.

The Authority will also make follow-up cybersecurity reassessments available every three years for members who have addressed prior assessment findings. These reassessments will help members evaluate progress, identify remaining vulnerabilities, and determine where additional work may be needed.

Members may continue to access fully funded cybersecurity assessment services, including a National Institute of Standards and Technology (NIST) Questionnaire, and internal and external vulnerability assessments.

To provide additional flexibility, members may also choose to use another qualified cybersecurity vendor for a comprehensive assessment or tabletop exercise. In those cases, the Authority will reimburse the member up to the amount the Authority would otherwise pay for the same service through Triden Group. Any cost above that amount will remain the member’s responsibility.

These expanded resources complement the Authority’s existing cybersecurity tools, including KnowBe4 for security awareness training and phishing simulations, Eagle Eye for cyber risk management, and eRiskHub, an online portal with cybersecurity resources and incident response planning tools.

For more information or to access these services, members should contact their regional risk manager.

 

< Back to Full Issue Print Article