Jefferson County weighs higher-cost on-site IT contract, cites cybersecurity risks

Jefferson County leaders opened a discussion about upgrading the county’s IT services, saying a proposed contract with an outside vendor would add on‑site technicians and formal cybersecurity protections.

“Over the years IT has become an important deal,” Speaker 3 said, arguing the county needs someone on site rather than waiting for a remote technician to arrive. He warned that the county holds “a lot of public information” and said the risk of data being seized or held for ransom made stronger defenses a priority: “We don't need to have that taken and then held for ransom,” he said.

Speakers said the county currently pays about $10,000 per month (roughly $120,000 annually) to the incumbent provider but that the new proposal — discussed under a vendor name mentioned in the meeting as “Exos”— would be more expensive because it would hire a local on‑site technician and add cybersecurity services. Speaker 4 said the vendor’s draft proposal includes cybersecurity measures and that county staff will circulate the proposal for review.

Several participants urged the boards to treat cybersecurity as a public‑safety matter. Speaker 6 and others described recent, sector‑wide incidents that exploited unexpected systems (for example, HVAC controls) and urged robust vulnerability scanning and ongoing monitoring.

The boards did not approve a vendor at the meeting. Officials said staff will share the vendor’s written proposal and an estimate of recurring costs, and that they will seek competitive options before a final procurement decision.