2023-372-Resolution No. 2023-066 Recorded 12/5/2023Recorded in Deschutes County CJ2023-372
Steve Dennison, County Clerk
Commissioners' Journal 12/05/2023 9:40:51 AM
REVIEWED o(T1rFs ���i�� II I I I IIIIIIII II I II IIII I III II III
2023 372
LEGAL COUNSEL
For Recording Stamp Only
BEFORE THE BOARD OF COUNTY COMMISSIONERS OF DESCHUTES COUNTY,
OREGON
A Resolution Increasing Appropriations
And FTE Within the 2023-24 Deschutes * RESOLUTION NO. 2023-066
County Budget
WHEREAS, the Information Technology department presented to the Board of County
Commissioners on 11/29/23, with regards to adding 1.00 regular FTE for an Information Security
Manager position, and
WHEREAS, ORS 294.471 allows a supplemental budget adjustment when authorized by
resolution of the governing body, and
WHEREAS, ORS 294.463 allows the transfer of Contingency within a fund when
authorized by resolution of the governing body, and
WHEREAS, it is necessary to reduce Contingency and increase Transfer Out
appropriations by $32,000 in the General Fund, and
WHEREAS, it is necessary to reduce Contingency and increase Transfer Out
appropriations by $150,000 in the Risk Fund, and
WHEREAS, it is necessary to recognize Transfer In revenue and increase appropriations
by $64,000 in the Information Technology Fund, and
WHEREAS, it is necessary to recognize Transfer In revenue and increase appropriations
by $118,000 in the IT Reserve Fund, and
WHEREAS, Deschutes County Policy HR-1 requires that the creation of or increase in
FTE outside the adopted budget be approved by the Board of County Commissioners; now,
therefore,
BE IT RESOLVED BY THE BOARD OF COUNTY COMMISSIONERS OF
DESCHUTES COUNTY, OREGON, as follows:
Section 1. That the following revenue be budgeted in the 2023-24 County Budget:
Page 1 OF 3-Resolution no. 2023-066
Information Technology
Transfers In
Total Information Technology
$ 64,000
$ 64,000
IT Reserve Fund
Transfers In $ 118,000
Total IT Reserve 118,000
Section 2. That the following amounts be appropriated in the 2023-24 County Budget:
General Fund
Contingency $ (32,000)
Transfers Out $ 32,000
Total General Fund $ 0
Risk Fund
Contingency $ (150,000)
Transfers Out $ 150,000
Total Risk $ 0
Information Technology Fund
Program Expense $ 64,000
Total Information Technology 64,000
IT Reserve Fund
Program Expense $ 118,000
Total IT Reserve S 118,000
Section 3. That the Chief Financial Officer make the appropriate entries in the Deschutes
County Financial System to show the above appropriations:
Section 4. That the following FTE be added:
Job Class
Position
Type
Effective Date
FTE
Number
Information Security Manager
n/a
Regular
11/29/2023
1.00
(TBD)
Duration
Total FTE
1.00
Section 5. That the Human Resources Director make the appropriate entries in the Deschutes
County FTE Authorized Positions Roster to reflect the above FTE changes.
DATED this �� day of November 2023.
Page 2 OF 3-Resolution no. 2023-066
ATTEST:
Recording Secretary
Page 3 OF 3-Resolution no. 2023-066
BOARD OF COUNTY COMMISSIONERS OF
DESCHUTES COUNTY, OREGON
A� -
ANTHO DEBONE, Chair
PATTI ADAIR, Vice -Chair
PHIL C ANG, Commissioner
O
O
O
C
6
N
W N
N
00
00
�
E
to
E
E
O
C O
O
2
N
m
n
00
0
~
V+
W
.rr
c
O
a
a
C
7
LL
V
N
E
O
�
c
'
C
E
C
0
C
N
.�` 0)
4E
to
w
vi to
5
Q
7 7
Q
0 m
m
N C
d N
O E
0) Q
0
Cl)
In Ln
O lI'S �o
I110
W
C
E
bA
Ln
E
i,
CD
m
O
CDIh
N
N
m
�
N
�D
O
p1
pQ
6l
M
O
0
O
0
a,
0
O�
C
m
[Y
m
N
00
M
O
CDd'
W
000
O
CD
Ln
j
tDD
nN'1
CD
^
M
M
0
O
M
ul
Ln
Ln
r-
n
.-
-0
LD
CV
N
N
N
E
E
V
Vi
W
V4
bh
ffr
VI
to
VT
VY
Vi
VY
4A
6
1R
O
O
p
O
O
O
O
O
O
O
O
O
O
p
O
0
00
00
O
O
00
ON
ON
m
00
O
0
M
N
c
O
O
O
O
M
M
N1
1�
O
00
m
M
d,
00
0
~
w
r
Ln
O
h
N
N
D\
m
N
�D
O
ON
01
0
N
m
M
00
m
O
O
CDO
O
Ln
W
O
m
OO
E C
t0
D;
O
h
m
Ln
M
Ln
10
00
pp O
tD
O1
7 a E
r
U 7 Q
00
N
w
w
a
v
a
v
_
V_
E �
o
E °
E
c
=
to _
E
E
E
E
oiS
>
o
7
F- C
H
CK
F
h
E
E
Q
>
2
O_
UO
i
i
O
C
VI
E
In
C
E
E
O
E V
V
7
7
7
E
V
E
J
O
O
O
U
c
u
E
b0
C
w
w
bA
E
LEu
oT
O_
E
N
0
O
J
C
C
_
C
7
E
N
C
E
E
LL
C
Q
o
"I
N
O
Uai
m
E
ofc
w
w
C
N
E
o
X
LLJ
d U
U i
0"
C
Ln w
y
T
V
T
T
C
U
C
yj I— O
C
N
w
C
C
C
C
C
C
C
C
C
C
C
C
C
O
C
C
O
C
C
O
r6
v V
a
o
v
N—
F
�-
o
U1
N
c�
m
O
v
a
O
E
a
O
v
a
O
v
a
O
a`-
a
-
a
E
a
v
a
a
a
U
So
0
0
0
0
o
0
0
o
v
o
0
0
0
0
0
0
0
U
E
O
V1
Ol
m
q'
O
Ln
u
d'
't
N
V'T
N
N
dt
N
V
N
V
N
V
N
m
V
O
0
0
Lfl
0
Ln
01
01
a1
CD
Ln
V)
O
m
CDO
Ln
m
CD
m
LO
O
0
CDIn
m
0;:�0
r
a1
61
6�
Q•
01
Ol
01
01
O
O
r
O
D1
Ol
O
CD
O
O
O
O
O
O
O
O
O
O
O
O
O
O
ID
l0
n
LD
r
lD
O
O
O
O
ID
l0
LD
LD
'D
'D
L
to
t
to
ID
'D
ID
to
to
'D
ID
lD
N
C
E
w
E
V)
V
u
°i
2
�
a
G
i
N
m
a)
O
L
N
M
m
Lo
r
�0TES CO
`� G2 BOARD OF
o {
COMMISSIONERS
MEETING DATE: November 29, 2023
SUBIECT: Resolution No. 2023-066, adding a new position of Information Security Manager
to the IT Department and allocating funds to address immediate cybersecurity
needs
RECOMMENDED MOTION:
Move approval of Resolution No. 2023-066 increasing appropriations and FTE within the IT
Fund, the IT Reserve Fund and the 2023-24 Deschutes County Budget.
BACKGROUND AND POLICY IMPLICATIONS:
Due to the change of IT leadership at the beginning of this fiscal year's budget planning, no
special requests were submitted for FY 2024, but staff did note the possibility of the
department submitting a mid -year request. The IT Department now seeks Board approval
for a mid -year addition of 1.00 FTE for an Information Security Manager position. It is
anticipated this position would be filled around March 1, 2024. Additional information
about the proposed scope of responsibilities for the position is included in the attached
memo. In addition to the FTE, additional costs have been identified for addressing
immediate cybersecurity needs in FY24 to enhance the security posture of the County.
BUDGET IMPACTS:
If approved, the department anticipates that FY 2024 costs for the FTE will be
approximately $64,000. The department is requesting a $32,000 transfer from the General
Fund (for the initial year only). The Risk fund would transfer the remaining $32,000 for the
position and an additional $118,000 for other cybersecurity technology improvements.
ATTENDANCE:
Tania Mahood, IT Director/CTO
Dan Emerson, Budget and Financial Planning Manager
MEMORANDUM
TO: Deschutes County Board of Commissioners
FROM: Tania Mahood, IT Director/CTO
DATE: November 15, 2023
SUBJECT: Request to add an Information Security Manager position
I. Summary
Due to the change of IT leadership at the beginning of this fiscal year's budget planning, no
special requests were submitted for FY 2024, but staff noted that the department might
submit a mid -year request. The I.T. Department is now seeking Board approval for a mid-
year addition of a Security Manager position. Additional information about the proposed
scope of responsibilities for the position is included in the attached memo.
II. Position Scope and Support
The evolving landscape of security threats and the increasing need to safeguard our assets,
information, and personnel make this addition imperative for ensuring the resilience and
integrity of our operations.
This new position can devote their entire attention to assessing, responding, training,
developing, and monitoring security at Deschutes County. The proposed position would
provide:
• Alignment with a cybersecurity framework.
• A cybersecurity roadmap that evaluates and assesses current and future state.
• Protocols and policies around cybersecurity.
• Collaboration with departments to understand needs and compliance.
• Support in advocating for the necessary resources.
• Support for our incident and disaster recovery.
• Cybersecurity metrics.
While the addition of this position is an investment, the long-term cost savings due to more
efficient risk management, reduced security incidents, and enhanced compliance will
significantly outweigh the initial expenditure. This position will lead to a judicious allocation
of resources, ensuring a prudent approach to security expenditures.
IV. FINANCIAL IMPACT
If approved, the department anticipates that FY 2024 costs will be $64,000 which includes:
• Salary: $42,200 (March 2024 -June 2024)
• Benefits: $21,800 (March 2024 -June 2024)
The department is requesting a $32,000 transfer from the General Fund and $32,000 from
the Risk Fund. (for the initial year only).
V. BOARD DIRECTION
Staff requests consideration of Board support for the addition of one 1.00 Information
Security Manager FTE in the IT department.