BOH minutes 082218 - Laserfiche WebLink

Browse Search

MINUTES-Final ORANGE COUNTY BOARD OF HEALTH August 22, 2018 S:\Managers Working Files\BOH\Agenda & Abstracts\2018 Agenda & Abstracts/ August Page 2 V. Educational Sessions A. Cybersecurity Jim Northrup, Chief Information Officer, shared information on how Orange County tackles cybersecurity and vulnerabilities. The presentation was a general overview as to not disclose any confidential security information. Below is a summary: • Data must be protected. The OC servers are backed up at 2 different locations and the tapes are moved offsite at least 25 miles away which is the recommended minimum distance. • The number 1 reason that hacking occurs is due to people clicking on links. • OC has a fairly sophisticated filtering system. Every message is filtered. Currently 70% of spam does not get delivered to employees’ mailboxes. • Multiple audits are completed throughout the year. • OC IT is big on user-education. OC IT conducts phish testing, provides video training on key cybersecurity access for all staff and minimizes known vulnerabilities such as poor passwords. Eventually, OC IT will not allow the individual to log in if they don’t complete the cybersecurity training. • OC IT is working on a continuity operation plan. A restoration process/plan is also in place. After the County’s 4th cyberattack, restoration was completed in 12 hours which is a big improvement from the 2 ½ weeks (24 hours/day) it took for restoration during the 1st attack thanks to the OC IT restoration plan. • Six years ago, OC didn’t pay the ransomware when it was attacked and 99.98% of data was restored. Restoration takes the most time as there are millions and millions of files. To restore 1 serve driver takes 1 day. • OC IT has a web tracking system that can track what an individual clicks. Trying to identify people that are already on our network is an issue, not necessarily those that are trying to get in. OC IT needs to protect from the inside. Penetration testing is conducted and the reports are analyzed. • In response to the question of protecting healthcare data, it was shared that OCHD is one of the earliest partners of IT in terms of being proactive. • These measures have been critical in preventing a Mecklenburg County government situation. The BOH had questions that were addressed by Mr. Northrup. B. 4th Quarter Financial and Billing Dashboard Reports Rebecca Crawford, Financial & Administrative Services Director, gave a report on the 4th quarter revenue and billing accuracy. The report is as follows: • Total Health Department Budget vs. Actuals: Average YTD monthly revenue in FY18 after the fourth quarter is $276/month or $3.5 million for the entire fiscal year, representing 98.5% of our overall budgeted revenue for the year. This is an increase of ~$600k over FY 16-17. Expenses were lower than revenues at 94% of the total overall budget due to multiple contracts that crossed into the beginning of FY 18-19 and will be spent out by August 2018, which was $9.8 million compared to year end FY 16-17, which was $9.2 million.