City of Groveland Minutes City Council Workshop Monday, April 15, 2024 The Groveland City Council held a workshop on Monday, April 15, 2024 in the E.L. Puryear Building located at 243 S. Lake Avenue, Groveland, FL 34736. Mayor Evelyn Wilson called the meeting to order at 6:04 p.m. with the following members present: Vice Mayor Mike Radzik, Council Members Richard Skyzinski, and Dina Sweatt. City officials present were City Manager Mike Hein, City Clerk Virginia Wright, Sergeant-At-Arms Chief Shawn Ramsey and City Attorney Anita Geraci-Carver. Council Member Gaines had an excused absence. As an alternate option, the public was provided the opportunity to attend the April 15, 2024 City Council Workshop virtually in listen/watch mode only. A public notice with instructions to participate was posted to the City's website under "public notices" at www.groveland-t.gow and int the display board at City Hall. AGENDA 1. Ordinance 2024-1: FY2023-2024 Mid-Year Budget Adjustment April Allman/Budget Analyst provided a PowerPoint presentation as attached to these Jo-DrurylFinance Director provided a PowerPoint presentation as attached to these Council Member Sweatt inquired if there were any drinking water plants other than the Villa City drinking water plant. City Manager Hein stated yes, there were several throughout the City. This is for the new facility located on Villa City. The project is currently in the design phase. City Manager Hein reported additional information about grants received and utilities will be presented at the April 29th workshop. Vice Mayor Radzik inquired if 303 and 304 funds were going towards loans. Ms. Drury replied funds from 304 would go towards the design build of Station 3. The design and engineering is expected to increase from six hundred thousand ($600,000) to nine hundred thousand ($900,000). The Police Impact fee Fund would primarily be used for Vice Mayor Radzik inquired what funds would be used to pay back the loan. Mr. Drury stated the loan was allocated in the original budget adoption from Impact Fee Funds. Vice Mayor Radzik referenced the utility fund 404 reduction. He asked how the difference would be made up to construct wells. Ms. Drury stated the construction cost minutes as Attachment 1 (pages 1&2). minutes as Attachment 1(page 3). police department vehicles and outfitting related to growth. was lower than anticipated. All three (3) wells would be constructed. 1 APRIL 15, 2024 CITY COUNCIL WORKSHOP MINUTES Vice Mayor Radzik inquired as to how much was outstanding in utility fund loans. Ms. Drury stated she would provide a summary to Council. City Manager Hein reported this item would be discussed at the April 29th Workshop. It would also be a source of City Manager Hein reported interest earnings were up, however, nominal. Some oft the anomalies that caused the increase were due to a large commercial project. The project was completed, and all impact and building fees were paid. City Manager Hein stated the good news was that the Scannell project would most probably be included on the City Manager Hein stated he anticipated trends of increase in insurance rates and personnel costs to continue. The building funds were reduced due to a reduction in new starts to single family homes. There was also a decrease trend for franchise fees and utility user rates. A ballot measure which would add an extra layer on the homestead exemption was to be included on the ballots this year. This could negatively impact Vice Mayor Radzik asked if longevity raises had been sunset last October. City conversation for the next fiscal year. tax bill for next fiscal year. revenue streams as well. Manager Hein noted it was sunset for new employeesonly. 2. Assessment & Needs to Support IT ITD Director Jim Foran, provided al PowerPointpresentation as attached to these minutes Vice Mayor Radzik noted he spoke with Mr. Foran regarding disaster recovery being most effective when located a few miles out and possibly renting space within Lake County for this purpose. Mr. Foran stated yes; it is his intention to form partnerships with Lake County and surrounding municipalities to share space and back each other Vice Mayor Radzik inquired as to how long it would take to get back up and running with minimal loss in the event of a cyber-attack. Mr. Foran stated the time would be Vice Mayor Radzik inquired if the City website would be revamped to be more user friendly. Mr. Foran stated yes. He reported a contract agreement was recently signed with CivicPlus which allowed for free website redesign every two (2) years. The agreement would include five (5) hours per month provided by the CivicPlus Vice Mayor Radzik asked if a city app was possible. Mr. Foran stated yes, he would like as Attachment 2. up. measurable. webmaster. tos seeone. 2 APRIL 15, 2024 CITY COUNCIL WORKSHOP MINUTES Vice Mayor Radzik inquired if the Track-It software was currently talking to the Mayor Wilson inquired if the City still used Black Mountain software. Mr. Foran Mayor Wilson felt it important for the City to keep everything secure. She thanked accounting software. Mr. Foran stated it was not at this time. responded no. Mr. Foran for the presentation. Vice Mayor Radzik stated it was important to do the IT upgrades. Council Member Skyzinski asked if it was likely to upgrade the systems with minimal interruption in staff's day-to-day routine. Mr. Foran stated the plan was to build out the new network separate from the current network. This would allow for testing and a smooth transition once implemented. ADJOURNMENT Mayor Wilson adjourned the workshop at 6:53 p.m. G Groveland FLORIDA City with NaturalCharm Ehpallaon Evelynv Wilson, Mayor Ahile VirginiaWright, City Clerk Attest: 3 ATTACHMENT 1 FY2023-2024 MID-YEAR BUDGET ADJUSTMENT APRIL 15, 2024 Grovel FLORID FY2024 MID-YEAR BUDGET ADJUSTMENT General Fund & Special Revenue Funds CURRENT BUDGET $28,864,994.00 $3,200,000.00 $2,904,000.00 $5,795,348.00 $1,241,207.00 BUDGET AMENDMENT $3,665,586.00 $561,629.00 $342,118.00 $359,276.00 $19,526.00 REVISED BUDGET $32,530,580.00 $3,761,629.00 $3,246,118.00 $6,154,624.00 $1,260,733.00 FUND 001 110 120 150 200 NAME General Fund Building Fund Grant Fund Fire Fund Debt Services Fund Grovel FLORID FY2024 MID-YEAR BUDGET ADJUSTMENT Capital Funds CURRENT BUDGET $156,571.00 $294,198.00 $795,651.00 $1,111,924.00 $4,088,963.00 $109,705.00 $3,694,557.00 $1,617,334.00 $1,500,000 $4,250,000.00 BUDGET AMENDMENT $12,769.00 $159,182.00 $60,586.00 $17,188.00 $1,121,133.00 $56,092.00 $491,562.00 $- $2,191,248.00 $1,512,315.00 REVISED BUDGET $169,340.00 $453,380.00 $856,237.00 $1,129,112.00 $5,210,096.00 $165,797.00 $4,186,119.00 $1,617,334.00 $3,691,248.00 $5,762,315.00 FUND 301 302 303 304 310 320 321 322 323 324 NAME Impact Fee Fund -A Admin Facilities Impact Fee Fund -P Parks Impact Fee Fund - Police Impact Fee Fund - Fire Discretionary Sales Surtax Fund Public Safety Complex Construction Fund Live Well Foundation Grant Fund Capital Lease Fund South Lake Regional Park Fund Cherry Lake Park Construction Fund Grove FLORI FY2024 MID-YEAR BUDGET ADJUSIMENT Utility Funds CURRENT BUDGET $13,244,188.00 $5,572,888.00 $9,262,230.00 BUDGET AMENDMENT $2,513,828.00 $453,711.00 $1,791,941.00 $49,122.00 $(2,019,473.00) $1,224,984.00 $463,382.00 $1,362,980.00 $70,323,318.00 $25,740,000.00 REVISED BUDGET $15,758,016.00 $6,026,599.00 $11,054,171.00 $49,122.00 $1,573,379.00 $3,620,234.00 $9,731,025.00 $52,698,282.00 $71,073,318.00 $25,740,000.00 FUND 400 401 402 403 404 405 406 407 408 409 NAME Utility Fund - Operations Utility Fund - Water Impact Fees Utility. Fund -S Sewer Impact Fees Utility Fund - Capital (Other Sources) Utility Fund - Grant Funded Capital Utility Fund - Financed Capital Water Meter/Water Line Construction Sampey WWTF Construction Project Regional WWTF Construction Project Villa City Drinking Water Plant $- $3,592,852.00 $2,395,250.00 $9,267,643.00 $51,335,302.00 $750,000.00 $- Project $152,432,481.00 $109,832,313.00 $262,264,794.00 Grove FLORIDA ATTACHMENT2 Groveland Innovation and FLORIDA City withNatural Charm Technology James Foran, Director Network Locations Groveland FLORIDA ClywihNmmdichm D Technologys SupportedLocatons Technology Depa ChyafCoutinclocalons gcityHall- QoakTiveCenetury. 5501FL19 OParksHouse 239NMsinAve OGrovelandAnnex- 146Brcadst OPublics Satery(PD/FD) OrireStation2- 193CherryValle. OTPW- 1153SampeyRd Q421BevelyDr QlaleDavidOenter- 450SLake OFireHouse 20545independen. OCherylake 1311 WisontakeP- OpaaBihPayand" Sout. Pospwer. OEeseT Tomino Center. gJimmyT Thomash MemorialParks QJohny Wesley GiffinPark 4218. OEL Puryear Building/ Commu. ORonaldSeftond GaffneyN QVeteransPark: 243SLakeAve. Managing eehnology/lori9locatons Throughoutthe City Mago The Information Technology Team By the numbers. Leadership 2full-time + 1 part-time helpdesk staff James Foran Director ofl Innovation and... Mark Perry Deputy Director ofl Innovat.. Resolving helpdesk tickets -1,777 and calls, serving 189 users. Maintaining 206 PC's Laptops Monitoring and servicing over 1,600 Application & Systems Support devices. Robert Drummond SSpecialist Marcus Harris r.N NetworkAdmin Providing meeting A/Vs support Supporting City, County, and State Applications 24/7. Jeremiah Morris-Wyley TSupport Assistant Technology INFOGRAPHIC So much more than meets the eye. Above the Waterline Technology PC's Phones Cellular/ VOIP Emaill Documents /Printers Cameras /WIFI Security Intemet of Things Below the Waterline Technology Servers Active Directory File Sharing Services DNS DCHP Backup Campus Edge Security Next Gen Firewalls Site to Site VPN MFA Anti Virus: SPAM End Point Protection Cyber-security Zero-Day exploits External Attacks Insider Threats Malware Corp Account Takeover Spam & Phishing Network Infrastructure Routers Switches Fiber Optics NAS/SANS PoVE [595632.87758 omnector. [595633. .1193 onnector omnector. onnector. 1689949.3323441 148c 8800: onnector. onnector. onnector. onnector. onnector. (624560. 8883741 14Be 0888: la: 80.1 1-eth3: onnector. 1631588. 0880: 4184361 14Bc 1a:88.8 ethz: onnector. Todays Reality 0888: S 1a:80.0 eth2: ove [602959.1546711 148e 1a:88. .00 eth2: SFP module type urecoynized or nos 1662959.3940651 148e 0080: 1a-68.1cth3: SFP module type urecognized or nosi 1689949. .5912241 i48e 0800: la: 88.1cth3: SFP modulc type urecognized or TOSFI [617251.3 3978331 14Be 0080: 1a:00. B eth2: SFP odulc type urecognized or no SFF 1617251.6415321 148c 0008: $1:0B.10 cth3: SFP odule type urecognized or no SFP 1624568.6421631 148c 6060: la :88.D Eth2:SFP sodulc tupe.mrecognizet or no SFP 1631588. onnector. 6614821 1Bc 8888: 1a:08.1 eth3: SFP Eodule type urecognized or no SFPC Outof Date Security Devices Insecure And Server Rooms SFP module type urecognized or nosF Disorganized Network Devices Unmonitored Non-ExistententNetwork Documentation ove ove. ove pve. Inconsistent Patch Management Date Outof Servers Workstations and Practices SFP modulc type unrecognized or no SFP SFP rodulc type urecognizedor no SFP Allofwhich are inconsistentwith CJIS Compliance TAISTESS 20.25.241.18 PAdwLd 20.25.241.18 Key Components of ypercrime-asa-Senvice (Caas) RansomwareasaSenvice: Hacking-as-a-Servis 16.7% DDoS-for-Hire 16.786 16.7% CRIME 16.7% Exploit Kits OPPORTUNITY Phishing-as-a-Service Crime Cyber Playbook Cyber Criminal Motivation Key Components of the ypercrmeasa-service (Caas) Ecosystem Infrastructure Sectors Affected by Ransomware Defense Industrial Base I2 Water and' Wastewater Systems 8 Emergency Services 9 Chemical 24 Energy Communications Transportation Food and Agriculture Commerciall Facilities Financial Services Information Technology Government Facilities Critical Manufacturing Healthcare. and Public Health Malware Distribution Datal Harvesting Vulnerability! Discovery PhishingasaSehice Exploit Kits Data Theft Profit Sharing .SSA-t.NA Ransomware Development 30 32 44 75 87 122 137 156 Unauthorized Access Caas Ecosystem Malwareasa-service Automated Exploitation Template Campaigns DDoS-for-Hire Network Disruption 218 249 Stress Testing Payload Customization Source: FBII Internet Crime Complaint Center annual report Cyber Attacks on Government Networks up 59% Business Email Compromise Ransomware Criticalinfrastructure Doxxing of First Responders Zero Day Exploits Around the time Groveland's network was designed - Networ security was like securing the castle. Allresources were protected withinit's walls and main concer were guarding the main gate PhysicalSecurity, Thosewere the good old days! CYBERSECURITY 0--0 Application Information Network Operational Encryption Access control End-usereducation Disasterr recovery MS-ISAC Multi-State Information Sharing & Analysis Center" - Elections Infrastructure ISAC CIS. RITYA AGE CISAf focuses ont the cybersecurity of all criticali infrastructure within the United States (including election offices). The MS-ISACisat trusted resource for The EI-ISAC: supports the rapidly CISi is home tot the MS-ISAC and thel EI-ISAC cyber threat prevention, protection, response, andi recovery for U.S. State, Local, Tribal, and1 Territorial (SLIT) government entities. changing cybersecurity needs ofU.S.SLTT election offices. CYBER SECURITY Denying the Opportunity 0--0 Application Information Network Operational Encryption Access control End-usere education Disasterr recovery Application Information Network NGFW Palo Alto 802.1x switching Ops City Cluster Encryption Access Cntrl Palo Alto Xpanse CJIS Data rest Palo Alto VPN Latest Ciphers MFA Compliance PCI Virtualization Encrypted at Clearpass PANORAMA PD Cluster 802.1x Certificate Authorities Secured Cabinets Virtualization 'always on" Authentication Cortex XDR Information Sharing and Automated Threat updates 802.1xCJIS Unified compliant Wi-Fi monitoring and Encryption Network protection Supplemental Budget Request Total Project Costs for Y2024-51.304,058.0 Fund Project Cost General Fund Network Refresh $663,854.00 General Fund Project Contingency $175,000.00 GeneralFund Network Refresh Maintenance & $121,000.00 [per year5years] Subscription Costs (Financed) City Virtualization Project Discretionary Sales Surtax $162,507.00 Discretionary Sales Surtax PD Virtualization Project $181,697.00 - Our Promise Uptime - All systems are monitored 24x7 to ensure stability, unplanned downtime is minimized, planned downtime is coordinated with the business in advance OPERATE Capital Projects - All capital projects are planned, managed, and implemented according to best practice, done on time, and under budget AND in that order! Premier Support - Help end users with any break fixi issues, moves, adds, and changes, knowledge transfer (how-to) while ensuring. the technology team documents and communicate all processes within ensuring stability, continuity and efficiency both within the technology tea and throughout the employee community. Network Standards - Backup, DR, Risk Control, Security, and Compliance - AlL systems are backed up, restores are tested, there is a rehearsed disaster recovery plan, IT security best practices, CJIS and PCI compliance. Awareness Training. - Ensure employees and IT Staff have the training they need to use our systems securely