Loading...
HomeMy WebLinkAboutResolution - 2024-R0147 - Application For The Texas State And Local Cybersecurity Grant Program - 03/26/2024Resolution No. 2024-R0147 Item No. 5.50 March 26, 2024 RESOLUTTON WHEREAS, the City of Lubbock is applying for the State of Texas State and Local Cybersecurity Grant Program (SLCGP) with project Darktrace Cybersecurity Assessment and Evaluation (the "GranY'); and WHEREAS, this program will support efforts to address imminent cybersecurity threats to state and local information systems by providing funding to implement programs that support local governments with managing and reducing systemic cyber risks: and WHEREAS, the City Manager executed the Grant application on behalf of the City of Lubbock, attached hereto as "Exhibit A" and incorporated herein; and WHEREAS, a component part of the application requires a resolution of the City Council of the City of Lubbock to make certain findings in order to apply; NOW THEREFORE BE IT RESOLVED BY THE CITY COUNCIL OF THE CITY OF LUBBOCK: THAT the City Council of the City of Lubbock (the "Council") does hereby authorize and ratify the signature of the City Manager for and on behalf of the City of Lubbock for an application to the State and Local Cybersecurity Grant Program by and between the City of Lubbock and the State of Texas, Office of the Governor (OOG), for grant funds for the Darktrace Cyber Security Assessment and Evaluation and related documents. Said Agreement is attached hereto and incorporated in this resolution as if fully set forth herein and shall be included in the minutes of the City Council. THAT the Council authorizes the submission of the application to the Public Safety Office (PSO). THAT the Council hereby commits to provide all applicable matching funds for the Grant. 1'HAT the City Manager of the City of Lubbock is authorized to apply for, accept, reject, alter, or terminate the grant. THAT the Council hercby assures in the event of any loss or misuse of grant funds, the City of Lubbock will return the funds to PSO. Passed by the City Council on __ __ March 26, 2024 Page 1 of 2 Resolution No. 2024-R0147 March 12`h, 2024 The Honorable Greg Abbott Governor of Texas Office of the Governor P.O. Box 12428 Austin, TX 78711-2428 Dear Governor Abbott, City of ��-� Lubbock TEXAS As the City Manager of Lubbock, Texas, it is with great anticipation and a shared commitment to the safety and security of our community that I write to approve the submission of our application for the Texas State and Local Cybersecurity Grant Program. To comply with the requirements for the grant application and to demonstrate the City Council's unwavering support for this initiative, the attached resolution authorizing the submission of our application will appear on the Consent Agenda at the City Council meeting scheduled for March 26, 2024. This resolution is a testament to our collective determination to enhance our City's cybersecurity defenses, and reflects the collaborative effort between our local government and the State of Texas to address the growing challenges in the digital domain. Upon approval, we will promptly forward a signed copy of the resolution to your office, along with any additional documentation that may be required to support our application. We are committed to a transparent and cooperative process and eagerly anticipate the opportunity to work closely with your office and the relevant state agencies to further our mutual goals of ensuring the security and resilience of our cyber infrastructure. Thank you for your consideration and support. Should you require any further information or wish to discuss our application in detail, please do not hesitate to contact my office. Sincerely, C� � W. Jarr tt Atkinson City Manager City of Lubbock Citizen's Tower • 1314 Ave. K• P.O. Box 2000 • Lubbock, Texas 79457 •(806) 775-2016 • Fax (806) 775-2051 jatkinson@mylubbock.us ATTEST: Courtney Paz, City Secretary APPROVED AS 1'O CONT�NT: �'1� Bill � owe , eputy City Man� APPROVED AS TO FORM: elli Leisure, Senior Assistant City Attorney ccdocsiRES.Ratify Darktracc Grant App 3.8.24 Page 2 of 2 RESOLUTION WI-IERCAS, the City of Lubbock is applying for the State of 1'exas State and Local Cybersecurity Grant I'rogram (SI,CGP) with project Darktrace Cybersecurity Assessment and I�valuation (the "Grant"); and WI-ILItLAS, this program will support efforts to address imminent cybersecurity threats to state and local information systems by providing funding to implement programs that support local governments with managing and reducing systemic cyber risks: and WI-ILRLAS, the City Manager executed the Grant application on bchalf of the City of Lubbock, attached hereto as "1?xhibit A" and incorporated herein; and WI IEF�:AS, a componcnt part of thc application rcquires a resolution of thc City Council of the City of Lubbock to makc ccrtain f ndings in order to apply; NOW TI IL;RL:FORC I3L I"1' RLSOLVI�D I3Y "I�IIL CITY COUNCIL OP 1'IIE CITY OF LUBBOCK: TI IA1' the City Council of the City ol Lubbock (the "Council") does hereby authorire and ratify thc signaturc of thc City Managcr for and on bchalf of thc City of I.ubbock for an application to the State and Local Cybcrsccurity Grant Yrogram by and betwecn the City of Lubbock and thc State of "I'exas, Oftice of the Governor (OOG), for grant funds for the Darktrace Cyber Security Assessment and I:valuation and related documcnts. Said Agrccment is attached hcrcto and incorporated in this resolution as if fully sct forth herein and shall be included in the minutes of thc City Council. "I'HAT thc Council authorizes the submission of thc application to the Public Safety Office (PSO). 1'I I�1r1' thc Council hcrcby commits to provide all applicablc matching funds for thc Grant. "1'I IA"1' the City Managcr of the City of Lubbock is authoriied to apply for, accept, reject, alter, or tcrminatc thc grant. "I�IIA'1' thc Council hcrcby assures in thc cvent of any loss or misusc of grant funds, thc City of I.ubbock will rcturn the funds to PSO. Passed by thc City Council on Page 1 of 2 3/14/24, 2:30 PM Snapshot Description: Application - Peer Review Created: 3/13/2024 2:15:04 PM Grant Summary Agency Name: City of Lubbock Grant/App: 5211401 Start Date: 9/1/2024 End Date: 8l3112025 Project Title: Dark Trace Cyber Security Assessment and Evaluation Status: Pending OOG Review Profile Information Applicant Agency Name: City of Lubbock Project Title: Dark Trace Cyber Security Assessment and Evaluation Division or Unit to Administer the Project: Information Technology Address Line 1: 1314 Ave K Address Line 2: City/State/Zip: Lubbock Texas 79401-4051 Start Date: 9/1/2024 End Date: 8/31/2025 Regional Council of Goverments(COG) within the Project's Impact Area: South Plains Association of Governments Headquarter County: Lubbock Counties within Project's Impact Area: Lubbock Grant Officials: Project Director Name: Chris Nelson Email: cwnelson@mylubbock.us Address 1: 1314 Avenue K Address 1: City: Lubbock, Texas 79401 Phone: 806-775-2390 Other Phone: Fax: Title: Mr. Salutation: --- Select One --- Position: Senior Information Security Analyst Narrative Information Project Summary : Briefly summarize the project, including proposed activities and intended impact. The City of Lubbock seeks to significantly enhance its cybersecurity defenses to protect against sophisticated cyber threats that target the City's critical infrastructure. With the rising incidents of cyberattacks on municipal entities, it is imperative to adopt advanced, AI-driven cybersecurity solutions. We propose the acquisition of Darktrace cybersecurity software, leveraging artificial intelligence to establish a use pattern of network resources, thereby enabling our system to detect, respond, and neutralize cyber threats in real time. This grant proposal requests funding of $96,000 to cover the purchase, implementation, and training costs associated with deploying Darktrace software within the City's digital infrastructure. Problem Statement : https://egrants.gov.texas.gov/app/ProjecUGrantSnapshotFromSQL.aspx?GU I ID=7D11 CA56-3512-4FC6-BA57-5A95866C5060&printable=l 11d 3/14/24, 2:30 PM Grant Summary Provide a detailed account of the issues, threats or hazards that your project will target. For federal Homeland Security Grants, include specific page references to the regional or state Threat and Hazard Identification and Risk Assessrnent (THIRA), as applicable. The City of Lubbock is the l Oth most populous city in the State of Texas, and serves as a central hub for economic, educational, and healthcare services in the West Texas region. Many surrounding rural communities rely on the City's municipal infrastructure for critical services such as water, power, and solid waste disposal. With an increasing reliance on digital technologies, the City's cybersecurity framework faces mounting risks from cyber- attacks that threaten this infrastructure, critical services, and sensitive data. The 2023 Threat and Hazard Identification and Risk Assement (THIRA) Report from the South Plains Association of Governments (SPAG) identifies cybersecurity as a threat or hazard that most challenges the region's ability to achieve goals in a majority of the 31 Capability Target categories as well as Cybersecurity being its own Capability Target, page 17. Additionally, the Threa#lf-Iazard Descriptions and Impacts example on page 9 outlines an incident of compromised SPAG employee credentials that would be identified and mitigated with tools such as Darktrace in place. We seek to identify vulnerabilities within our current cybersecurity framework, including insufficient threat detection capabilities and a lack of proactive incident response mechanisms. Recent global and regional cybersecurity incidents highlight the urgent need for advanced solutions to safeguard against sophisticated attacks. Existing Capability Levels : Describe the existing capability levels, including resources that are currently in place to support this project prior to the use of grant funds. The City of Lubbock currently operates with a cybersecurity framework that includes standard protective measures such as firewalls, anti-virus software, and periodic security assessments. The IT department conducts regular training sessions on cybersecurity awareness for over 2,500 City employees and has implemented basic threat detection and response protocols. Despite these efforts, the existing cybersecurity capabilities are primarily reactive, with limited ability to proactively identify and neutralize advanced cyber threats before they impact City operations. Capability Gaps: Describe the capability gaps which will be addressed by the project. For federal Homeland Security Grants, include specific page references to the regional or statewide State Preparedness Report (SPR). The City of Lubbock, with its workforce of approximately 2,500 City employees and over 3 million instances of network activity a year, creates significant cybersecurity challenges. The complexity and volume of data flow necessitates a robust, adaptive solution to address existing capability gaps effectively. The City's existing cybersecurity measures lack the advanced analytics and machine learning capabilities necessary to identify sophisticated cyber threats proactively. Darktrace software, with its advanced AI-driven capabilities, is uniquely positioned to allow the City to establish a pattern of normal usage that will allow us to detect anomalies in real time, identifying potential threats before they can escalate. By understanding the nuances of the City's digital environment, Darktrace can pinpoint subtle signs of attack that would otherwise go unnoticed. The 2023 Stakeholder Preparedness Review (SPR) from the South Plains Association of Governments (SPAG), page 15, outlines cybersecurity targets that the region reasonably expects to achieve in the next 3-5 years. Establishing a pattern of normal activity in order to identify anomalies or tk�reats is a critical first step in achieving these goals in planning, organization, equipment, training, and exercises. As the City of Lubbock grows, its digital infrastructure becomes increasingly complex. The existing cybersecurity solutions do no easily scale, making it difficult to protect new devices and systems as they are added. Darktrace's AI-driven approach is inherently scalable, designed to adapt and grow alongside the City's digital infrastructure. By utilizing advanced tools such as Darktrace, the City will be better able to utilize resources to defend against increasingly sophisticated attacks. impact Statement : Describe the project objectives and how this project will maintain capabilities or reduce capability gaps. https://egrants.gov.texas.govlapp/ProjecUGrantSnapshotFromSQL.aspx?GUIID=7D11 CA5B-3512-4FC6-BA57-5A95866C5060&printable=l 214 3/14/24, 2:30 I'M Grant Summary The gaps in Lubbock's cybersecurity capabilities expose the City to signiiicant risks. A successf�l cyber-attack could lead to the disruption of essential services, such as emergency response systems, public utilities, and government operations, directly affecting the welfare and safety of the City's residents. Furthermore, breaches involving the theft of sensitive information could erode public trust and result in substantial financial losses due to recovery efforts and potential legal liabilities. With advanced solutions like Darktrace, we will be able to identify and establish normal use patterns that will allow us to quickly identify unusual activity in order to isolate and mitigate risks and protect the community. Homeland Security Priority Actions: Identify the Texas Homeland Security Priority Action most closely aligned with this project. Each Priority Action is linked with an Objective from the Texas Homeland Security Stragetic Plan (HSSP). List the Priority Action by number and text (e.g. 1.2.3 Expand and enhance the network of human sources that can provide detialed and relevant information on known or suspected terrorist and cirminal enterprises.) 3.2.1. Encourage the implementation of local-level mitigation projects that maximize the impact of pre-disaster and post-disaster funding. Target Group : Identify the target group and population expected to benefit from this project. The primary target group for this cybersecurity enhancement project includes all individuals and devices that interact with the City of Lubbock network including City employees, contractors, citizens, and elected officials. Implementing Uarktrace will directly benefit City employees by providing them with a more secure digital working environment, thereby enhancing their productivity and safeguarding confidential information. All residents and visitors of the City of Lubbock and sunounding communities are expected to benefit from the secure and uninterrupted access to City services, protected from the disruptions and hazards posed by cyber-attacks. Long-Term Approach: Describe how the applicant agency will maintain the capabilities supported by this project without additional federal or state funds. If sustainment is dependent upon federal or state grants, describe the ongoing need for future grants, as applicable. Using the Texas SLCGP grant for the initial Darktrace setup and scanningldata collection will enable the City of Lubbock to establish a baseline of network activity that will allow staff to quickly identify and address anomalies and threats throughout the network. At the conclusion of the grant period, the City of Lubbock will allocate necessary financial resources from its annual budget to cover the ongoing costs of licensing, software updates, and any necessary hardware upgrades to support the Darktrace system or other necessary system. This allocation will be reviewed and adjusted as needed to reflect the changing cybersecurity landscape and the specific needs of the City's IT infrastructure. Project Activities Information Selected Proiect Activities: ACTIVITY Incident and Response Planning PERCENTAGE: I DESCRIPTION [[I I 11 Scan and identify patterns of activity in order to plan and respond to incidents Measures Information Obiective Outnut Measures OUTPUT MEASURE Number of exercises conducted. Number of individuals participating in exercises. Number of people trained. Number of plans developed or updated. TARGET LEVEL 1 2500 4 3 https://egrants.gov.texas.gov/app/ProjecUGrantSnapshotFromSQL.aspx?GUIID=7D11 CASB-3512-4FC8-BA57-5A958BBC5060&printable=l 3/4 3/14/24, 2:30 PM Grant Summary Number of risk assessment technical assistance sessions conducted. Number of risk assessments conducted. Number of trainings conducted. Ob�ective Outcome Measures OUTCOME MEASURE Custom Output Measures CUSTOM OUTPUT MEASURE TARGET LEVEL 20 2500 4 TARGET LEVEL Custom Outcome Measures CUSTOM OUTCOME MEASURE TARGET LEVEL Budget Details Information Budget Information bv Bud�et Line Item: CATEGORY I SUB CATEGORY Personnel � Analyst (Exercises) Contractual and OSNP-00-SCAN Tools, Professional Network Services VulnerabilityScanning Budget Summary Information Bud�et Summary Information b CATEGORY Personnel Contractual and Professional Services Bud et Grand Total Information: OOG $96,000.00 DESCRIPTION OOG CASH IN-KIND TOTAL UN1T/% MATCH MATCH Analyst salaries that will oversee the $0.00 $0.00 $20,000.00 $20,000.00 27 exercises Darktrace Scanning $96,000.00 $4,000.00 $0.00 $100,000.00 0 Sofiware OOG CASH MATCH IN-KIND MATCH TOTAL $0.00 $0.00 $20,000.00 $20,000.00 $96,000.00 $4,000.00 $0.00 $100,000.00 CASH MATCH $4,000.00 You are (ogged in as User Name: wjatkinson IN-KIND MATCH TOTAL $20,000.00 $120,000.00 https://egrants.gov.texas.gov/app/Project/GrantSnapshotFromSQL.aspx?GU IID=7D11 CASB-3512-4FCB-BA57-5A9586BC5060&printable=l 414