Riley County to apply for confidential state IT security audit; county counselor to follow up

Jacob Hansen, Riley County counselor, briefed commissioners on an invitation from the legislative post audit office for a confidential IT security audit of one selected city and county in the state. "The State's going to do this for free," Hansen said, and the audit would take about 6–8 weeks overall with roughly 3–5 days of field work on site.

Commissioners asked about confidentiality and how results would be used; Hansen said the audit process is confidential and the state would supply a plan about a month before field work begins. The board directed Hansen to submit the county's application by Jan. 5 so Riley County can be considered; if selected, staff will review paperwork and can halt participation if terms are unsatisfactory.

Why it matters: The audit could identify IT security gaps at no direct cost and inform county cybersecurity investments. Commissioners emphasized the need for clear confidentiality and a chance to stop participation if the county finds terms unacceptable during review.

Next steps: Hansen will submit the application and report back with any proposed schedule or contract language if Riley County is selected.