Ransomware Readiness Assessment, Audit No. 2303

The City Auditor's Office contracted with Berry Dunn McNeil & Parker, LLC (BerryDunn) for a Ransomware Readiness Assessment audit to evaluate the effectiveness of controls for preventing, identifying, responding to, and recovering from a ransomware event. This work included an assessment of relevant cybersecurity controls and facilitating table-top exercises to test the City's readiness to detect and respond to a ransomware event.

Overall, BerryDunnfound that the Cityhas foundational pieces in place to effectively detect and respond to a ransomware or cyber related event. The assessment identified 23 areas, with low to moderate risk ratings, where improvements were recommended. Areas for improvement included developing and enhancing response plans, security policies, communication paths and personnel responsibilities during an event.