ADP Board Regular Meeting - June 13, 2023
Meeting Details: The Automatic Data Processing Board (ADP) met in regular session at 2:00 pm on June 13, 2023 in the Geauga County Auditor’s Office Appraisal Conference Room at 231 Main St. Chardon, OH 44024. Virtual access was available via MS Teams and the agenda was provided in advance. This observer attended in person.
Public Comment: ADP does not have a written policy. In practice, public comment is solicited at the end of the meeting.
Board Attendance:
-
Auditor/Chief Admin - Charles E. Walder
-
Board of Elections - Nora McGinnis
-
Clerk of Courts - Tammy McClintock for Sheila Bevington
-
County Commissioner – Jim Dvorak for Tim Lennon
-
Engineer – Katie Taylor for Joe Cattell
-
Prosecutor - Samantha Harris for Jim Flaiz
-
Recorder - Celesta Mullins
-
Sheriff - Scott Hildenbrand
-
Treasurer - Christopher Hitchcock, absent
ADP Staff Attendance:
Other Government Representatives:
-
Ron Leyde – Chief Deputy Auditor (virtual)
-
Pam McMahan - Fiscal Office Manager, Auditor’s Office
-
Kate Jacob - Chief Compliance Officer, Auditor’s Office (virtual)
-
Gerry Morgan - County Administrator
Others Present:
The meeting was called to order at 2:00 pm by Mr. Antenucci.
Minutes: Minutes from the April 13, 2023 emergency meeting were approved without edits.
The following actions were taken:
APPROVED - ADP Cisco+ Secure Connect subscription ($40,397). Mr. Haines explained that this expenditure was for a unified cloud-based product that provides for better vetting of network access which is particularly important with ongoing hybrid working. It also provides for a single point of monitoring and uniform policy application.
APPROVED - Renewal of ADP CrowdStrike Falcon & Identity Threat Protection ($114,070) - Mr. McLeod explained this is a one-year renewal of the CrowdStrike Falcon and identity threat protection that includes additional licenses to cover one year’s needs. This product provides antivirus protection, threat protection on workstations and servers and the ability to detect threats and take action to act to protect against harm.
Reviewer Comment: CrowdStrike is the product that detected the breach of the Water Resources email server in April, 2023. See Observer reports from Emergency meetings on April 13 and 17, 2023.
APPROVED - Water Resources Spectrum McFarland Internet Circuit ($45,850) - Mr. Haines explained that this circuit will allow for the McFarland facility to connect directly with the internet, eliminating the extra step currently requiring access via the maintenance facility at 470 Center Street in Chardon. Mr. Haines noted that this was discussed during the weekly meetings between ADP and Water Resources. Per the agenda, this item was identified as an ADP purchase. It was approved by the Board subject to correction indicating this was a Water Resources item.
TABLED - Developmental Disabilities LGCA Contract ($97,235) - This contract provides for IT services, i.e. desktop support, technology strategy, oversight of network configuration, etc. to Developmental Disabilities over a one-year period. No one from Developmental Disabilities was present to discuss this request. Mr. Walder expressed a need to discuss this with the Prosecutor’s office to determine the feasibility of such a contract so the Board voted to table this request.
APPROVED - Sheriff’s Motorola Solutions 5-Year Contract ($260,214) - Mr. Hildenbrand explained this contract was for the ongoing use of the Sheriff’s department’s Motorola radio system.
APPROVED - Sheriff’s Motorola Vesta Service ($306,342) - Sheriff Hildenbrand explained that this service related to the 911 emergency service at the Sheriff’s office over a 5-year period.
APPROVED - Replacement Firewalls ($44,285) - Mr. Haines explained that firewalls in the basement of the Annex building are at the end of their product lifecycle and need to be replaced.
Other Business:
Mr. Walder informed the Board that he had asked the Geauga County Courts IT resource to attend the meeting but they were unable to due to something arising at the last minute. ADP had asked the Courts IT resource to provide an update on compliance with the ADP Board’s policy regarding Multi-Factor Authentication and Long Passwords. They reported back that only 66% of the users within the Courts had complied. Mr. Walder expressed the need to move the rest of the Courts’ users to comply with the policy and eliminate vulnerabilities due to easily compromised short passwords putting the County network at risk of a potential breach.
Mr. Walder also reported that the Geauga County Auditor’s office were provided invoices to be paid totaling $90,000 by the Juvenile & Probate court for purchases of computers, servers and IT services. None of these items were presented to ADP for approval prior to acquiring them. Mr. Walder was requesting guidance from the Prosecutor’s office regarding this matter.
Mr. Walder brought to the Board’s attention information obtained from the Department of Homeland Security (DHS) regarding a network vulnerability they identified on January 15, 2021 in the Water Resources department. They provided a vulnerability notification report at the time to Mike Kurzinger in Water Resources. Mr. Walder is not aware that this report was subsequently provided to the BOCC or anyone else. DHS sent agents to discuss the matter with Mr. Kurzinger at the time and Joe Camino, outside IT service provider to Water Resources, completed patching of the affected servers by two weeks after the vulnerability was discovered. None of these servers continue to be in use after ADP’s recent actions to replace Water Resources’ servers.
Reviewer Comment: Please review the Observer Report from the ADP Board’s Emergency Meeting on May 11, 2023 where personnel actions were discussed relating to Mr. Kurzinger, subsequent to a recent FBI raid of his offices at Water Resources.
Mr. Hildenbrand asked the ADP team to assist the security officer at the Geauga County Office Building in finding the best solution to allow the officer to receive calls to the Security Desk while he is on patrol in the building. Mr. Attenucci explained that approximately 70 cameras are now in place and monitored by the security officer. New monitors soon to be installed will allow for most effective viewing of the multitude of camera feeds. Mr. Dvorak noted that he heard very positive feedback from the public and county employees about the presence and operation of the Security Desk at the building.
Public Comment: Mr. Antenucci then asked for public comments/questions. There were none.
The meeting was adjourned at 2:21 pm.
Minutes when posted are available here: Meeting Minutes | Geauga County Automatic Data Processing
Virtual Meeting Information: Contact Pamela McMahan at pmcmahan@gcauditor.com
Observer: Carol Benton
Editor: Anne Ondrey
Reviewer: Shelly Lewis
The League of Women Voters of Geauga is a 501(c)(3) nonpartisan political organization that encourages informed and active participation in government, works to increase understanding of major public policy issues, and influences public policy through education and advocacy. They do not support or oppose individual candidates or parties. Learn more about the LWVG at www.lwvgeauga.org.