File #: 21-609    Version: 1 Name:
Type: Informational Report Status: Passed
File created: 5/5/2021 In control: County Administrative Office
On agenda: 7/13/2021 Final action: 7/13/2021
Title: Supplemental Budget Request for Information Technology to Purchase Crowdstrike Falcon Complete Anti-Virus and Endpoint Security Protection in Fiscal Year 2021-22 (4/5 Vote Required)
Attachments: 1. Staff Report, 2. Crowdstrike Falcon Complete Quote 22671203.pdf, 3. Supplemental Budget 21-609.pdf

To: Board of Supervisors

From: County Administrative Office

Agenda Section: Consent

SUBJECT:
title
Supplemental Budget Request for Information Technology to Purchase Crowdstrike Falcon Complete Anti-Virus and Endpoint Security Protection in Fiscal Year 2021-22 (4/5 Vote Required)
end

RECOMMENDATION(S):
Recommendation
That the Board of Supervisors:
1. Approve the attached supplemental budget in fund 3550 budget unit 118 Information Technology (IT) in fiscal year (FY) 2021-22 in the amount of $115,668 for the purchase of Crowdstrike Falcon Complete Anti-Virus and Endpoint Security Protection. (4/5 Vote Required)

Body
SOURCE OF FUNDING:
Information Technology Fund 3550

DISCUSSION:
Humboldt County IT currently uses Crowdstrike for Anti-Virus and Endpoint Security. IT Security staff currently monitors security incidents and responds accordingly. This function is only performed during business hours and when IT security staff are available. IT is currently unable to monitor 24 hours a day, 365 days a year (24/7/365). If IT were to perform this service around the clock, including weekends, staff estimates the division would need to employ approximately 5.0 additional full-time equivalent staff.

Ransomware and other high-level security breaches are occurring more frequently in public and healthcare sectors. Recently, several California counties have been affected by ransomware causing serious disruptions to vital services and allowing for possible access to confidential and other sensitive data. Current breakout time (to spread across the entire network) after a breach has occurred is approximately 2 to 4 hours.

Falcon Complete is a government sector security service that provides 24/7/365 monitoring, detection, immediate containment, and remediation for all security intendents on the county's network. Their average response time to remediate a breach is 36 minutes. Staff is recommending that the county begin migrating users to the new Falcon Co...

Click here for full text