Lakeville committee discusses state cybersecurity grant, KnowBe4 training and tabletop exercise

The Town of Lakeville Technology Advisory Committee discussed a recently awarded state cybersecurity training grant and next steps for implementing security awareness training and a tabletop incident-response exercise.

Moderator said the committee had been recommended to apply for a state program and that the town was awarded the grant, naming Andrew and Emily as applicants. “We had a recommendation for Andrew and Emily to apply for the grant, which we were awarded,” the Moderator said. Committee members noted a formal contract with the state is required before funds or vendor services are delivered.

Members described the training product as a vendor-run package of short training videos, quizzes and phishing simulations identified in the discussion as KnowBe4 (transcript variants present). The committee discussed running an eight-part phishing campaign beginning in March and continuing through November, and speakers said the program offers multiple levels so campaigns can be targeted to different staff groups.

The committee also discussed a cybersecurity tabletop exercise opportunity available through a vendor/partnership the Moderator encountered at a recent event. The group agreed that completing an incident response plan — currently being drafted by Bob and his team — is a prerequisite to running the tabletop exercise; if the plan is ready, the committee hopes to schedule the exercise in May before certain allocated credits expire.

Committee members also noted that training requirements will be considered for inclusion in town contracts to help enforce compliance, and that finance/staff will handle the state contract paperwork once required.