Washington County Commissioners Approve Further Cybersecurity Investments

HAGERSTOWN, MD News (2/7/2024) – Less than a month after disclosing the scope of the Thanksgiving Day 2022 cybersecurity incident, including the compromise of personal information of an undisclosed number of individuals, Washington County Commissioners approved a new procurement of cybersecurity services for the Information Systems Department. The subject of discussion centered around the authorization of a Sole Source procurement for Sentinel One EDR (Endpoint Detection and Response) software and SOC (Security Operations Center) monitoring, to be provided by Arete Advisors of Boca Raton, FL.

The proposal, presented by Rick F. Curry, CPPO, Purchasing Director, and Josh O’Neal, Chief Technical Officer at the January 30th, 2024 meeting, recommended the authorization of a three-year agreement with Arete Advisors, totaling $285,379.20. This agreement encompasses the licensing and management of the Sentinel One EDR software suite, coupled with round-the-clock monitoring services, including security responses and notification procedures.

The procurement falls under the purview of Sections 1-106.2(a)(1) & (2) of the Code of Local Public Laws of Washington County, Maryland, which authorize sole source procurement under two conditions: when only one source meets the County’s requirements and when equipment compatibility is paramount. Information Systems Department asserts that Arete Advisors fulfills both criteria effectively.

The fiscal impact of the agreement amounts to $95,126.40 annually, sourced from the department’s allocated funds.

Upon discussion, Commissioner Wagner, seconded by Commissioner Harvey, moved to approve the sole source procurement. The motion passed with a vote of 4 to 0.

Following the open session, a closed session was held at 11:00 AM to deliberate further on cybersecurity matters, specifically pertaining to security assessments, network security, and deployments of security personnel or critical infrastructure.

The procurement of Sentinel One EDR software and SOC monitoring services marks a strategic investment in enhancing the county’s cybersecurity posture, aligning with contemporary best practices in information security management.

Story by multiple RFHC contributors.