FROM: James D. Herberg, General Manager
Originator: Lorenzo Tyner, Assistant General Manager
SUBJECT:
title
INCIDENT RESPONSE PROGRAM
end
GENERAL MANAGER'S RECOMMENDATION
recommendation
RECOMMENDATION:
A. Award a Professional Services Agreement to Tevora Business Solutions to provide Cyber Incident Response Consulting Services, Specification No. CS-2020-1160, for a total amount not to exceed $112,700; and
B. Approve a contingency in the amount of $16,905 (15%).
body
BACKGROUND
The Water and Wastewater sector is recognized as one of 16 critical infrastructures by the Department of Homeland Security whose assets, systems, and networks are considered vital. The number of cyber security breaches and incidents are increasing each day. According to Ponemon Institute, a leader in cyber security research, the average cost of a breach in 2019 was $3.92 million. Cyber incident response is the methodology or the organized approach to prepare, detect, contain, and recover from a security breach. Cyber incident response has become an important and necessary component of organizations to rapidly detect incidents to minimize loss and destruction and restore services. Over the last several years the Orange County Sanitation District (Sanitation District) has developed an Incident Response Program which includes the following:
* Incident Response Plan
* Incident response playbooks
* Incident response contact list
* Incident response escalation chart
* Incident response roles and responsibilities
* Incident response quick guide
The Sanitation District has recently renewed its cyber insurance policy which includes incident response services and has performed several tabletop exercises in October 2019 to prepare for a potential cyber security breach.
RELEVANT STANDARDS
* Ensure the public's money is wisely spent
* Maintain a culture of improving efficiency to reduce the cost to provide the current service level or standard
* Protect Orange Coun...
Click here for full text