IT Committee — Agenda Packet

www.greencountywi.org PLEASE NOTE: Upon reasonable notice, efforts will be made to accommodate the needs of individuals with disabilities through sign language, interpreters or other auxiliary aids. For additional information or to request the service, contact the Green County Clerk’s Office at (608) 328-9430. GREEN COUNTY INFORMATION TECHNOLOGY Wednesday, September 23, 2026 at 5:00 PM Green County Government Services Building IT Conference Room N3152 Highway 81, Monroe, WI 53566 INFORMATION TECHNOLOGY MEETING AGENDA 1. Call to Order 2. Public Comment (Limit 3 minutes per person) 3. Approval of Minutes 4. Approval of Bills 5. Budget Review i. Recommend Approval on 2027 IT Department Budget to Finance 6. Project Manager Report 7. Director's Report i. Project updates VMware to Nutanix MFA Website ADA compliance eWiSACWIS ii. Initial Assessments Staff Software Licensing Review of existing infrastructure 8. New Business i. KnowBe4 Defend Email Security ii. State and Local Cybersecurity Grant Program 9. Adjourn GREEN COUNTY INFORMATION TECHNOLOGY Thursday, August 13, 2026 at 5:00 PM Green County Historic Courthouse County Boardroom 1016 16th Ave Monroe, WI 53566 Monroe, Wisconsin INFORMATION TECHNOLOGY MEETING MINUTES 1. Call to Order Chair Even called the meeting to order at 5:00 pm. Members Present: Even, Carlson, Donovan, Hardenstein and Rikkers (online). Also Present: Finance Director Laws, Project Manager Flanagan and Administrator Owen. 2. Public Comment (Limit 3 minutes per person) None 3. Approval of Minutes i. Approval of July 9, 2026 Meeting Minutes Motion by Calrson to approve the July 9th, 2026 minutes as presented, seconded by Donovan. Motion carried by voice vote. 4. Approval of Bills Motion by Donovan to approve the bills as presented, seconded by Carlson. Motion carried by voice vote. 5. Project Manager Report i. Project Manager Report: Wendy Flanagan Project Manager Flannigan reviewed her monthly report. The committee was in favor of using additional funds from cost savings to go towards purchasing additional laptops for low-income households and seniors and expanding the internet refund program. 6. Director's Report Administrator Owen thanked the current It Staff for all their hard work while we searched for a new Director. Bill Kummer has accepted the position of Director and will begin work on Monday. 7. New Business i. Update on TCnetworks Support Contract The Contract with TC Newworks for administrative oversight will expire on September 14th. With the new director starting we will let this contract expire. ii. Discussion on Staff Work Load during Transition Staff have done well while short staffed and kept up on the multi-factor and server update projects. 8. Committee Raised Topics - Discussion None 9. Adjourn Donovan moved to adjourn, seconded by Carlson. Motion carried on voice vote at 5:25 pm. Green County IT Oversight Committee | Public Wi-Fi & Digital Equity Update Green County IT Oversight Committee | Confidential – For Committee Use Only | Page 1 of 9 GREEN COUNTY September 23rd IT Committee GCDC & IT Committee Partnership Contents of This Packet 1. ARPA Budget Summary 2. Tech Connect Initiative 3. Wi-Fi Reimbursement Program 4. Public Wi-Fi Project Overview & Location Status Green County IT Oversight Committee | Public Wi-Fi & Digital Equity Update Green County IT Oversight Committee | Confidential – For Committee Use Only | Page 2 of 9 1. ARPA Budget Summary The following is a summary of ARPA (American Rescue Plan Act) dollars allocated and expended in support of broadband and digital equity efforts in Green County. Date Org Item Description Total Cost Projected 10514500 2025 Broadband Coordinator Position $46,471.12 complete Projected 10514500 2026 Broadband Coordinator Position $98,285.49 complete Projected 10514500 Device Refurbishment Program Expansion (Tech Connect) $30,000.00 complete Projected 10514500 Libraries- Technology & Broadband training and programming $10,000.00 pending Projected 10514500 Low Income Assistance Program for Internet Access- School age families $30,000.00 complete Projected 10514500 Low Income Assistance Program for Internet Access- Seniors/Disabled Individuals $30,000.00+ Extended funds $34,050 spent Projected 10514500 Public Space Wi-Fi in each Green County community $220,000.00 Projects pending As agreed in last month’s meeting, due to surplus of funds: Additional refurbished laptops- $15,000 budgeted. Order is being completed- 65 laptops totaling $14,949.35 Internet costs for the Fields Housing center. We can wait until the end of the year, then reimburse their costs for the whole year- total $804.95. If we were comfortable reallocating about $40,000 of the surplus, we could comfortably add the remaining $24,000 to the Senior/Disabled individual Internet Reimbursement Program. Green County IT Oversight Committee | Public Wi-Fi & Digital Equity Update Green County IT Oversight Committee | Confidential – For Committee Use Only | Page 3 of 9 2. Tech Connect Initiative Tech Connect program takes retired County owned laptops and refurbishes them, distributed to those in need in Green County at no cost. Using ARPA funds, we expanded this program, purchasing refurbished laptops to fill gaps in the quantity the County IT could provide. Start Date Distribution Units Distributed May 2025 Individuals, Non-Profit & Small Business Owners 64 Laptops 3. Wi-Fi Reimbursement Program There are two internet reimbursement programs available, for two target groups. One is for low-income families with student-age children, using the free & reduced lunch program in the schools to qualify. The funds for this program are spent and will now close. The second program is new, just starting up in April 2026, focusing on Seniors and Individuals with disability. This program is picking up momentum. Both programs are administered the same way: An application and three months of paid home internet bills are submitted, and we mail out a $150 check to the home. They can reapply every three months, using the following months internet bills, until the allocated funds are depleted. School internet reimbursement program Total Allocated Program funds Distributed funds Green County Children supported in the enrolled families $30,000- Began the program in Sept 2025 with $20,000. Depleted funds, and committee reallocated an additional $10,000 at April 2026 meeting $30,000 All funds are spent and the program will be closed 438 Children Senior internet reimbursement program Total Allocated funds Distributed funds Applicants $30,000- Funds allocated at April 2026 meeting $24,000- additional allocated funds $34,050 processed 227 processed Green County IT Oversight Committee | Public Wi-Fi & Digital Equity Update Green County IT Oversight Committee | Confidential – For Committee Use Only | Page 4 of 9 4. Public Wi-Fi Project Overview GCDC is partnering with the Green County IT Committee to expand public Wi-Fi access in every community across the county. The following table summarizes the current status of each project location. Location Status Est. Cost Timeline Brodhead ($40,000 ARPA budgeted) Approved – Pending Install $32,424 TC Networks + $2,000 electrical $1,000 signs Electrical complete, TC Network working on install. Juda ($20,000 ARPA budgeted) Approved – Pending Install $3144.96 Vieth $1456.00 IBS $1000 signs Install planned Sept/Oct. Albany ($1605 ARPA budgeted) Construction complete, only billing remaining PSC Grant $10,771 ARPA funds to cover electrical $1605 Waiting on bill for electrical. Will order signs if they want them. Monroe- YMCA Approved – Pending Final plan TC Network quote $5,835.40 Location approval- TC Network creating final plan Monroe- Monroe Library Approved – Pending Final plan Pending Quote Location approval- TC Network creating estimate & plan Monroe- Family Promise Approved – Pending Final plan TC Network quote $1,779.78 Location approval- TC creating Network final plan New Glarus ($25,000 ARPA budgeted) Approved – Pending Install $15,916.44 TC Networks + $1,000 electrical+ $1000 signs Electrical estimate approved, equipment on order Brooklyn ($25,000 ARPA budgeted) Approved – Pending Install $9,389.36 TC Networks + $1730 electrical + $1000 signs Electrical complete, TC Network to working on install. Monticello ($30,000 ARPA budgeted) Approved – Pending Install $18,170.06 TC Network + $4,000 electrical + $1000 signs Electrical estimate approved, equipment on order Browntown Not Interested N/A N/A Location Details Green County IT Oversight Committee | Public Wi-Fi & Digital Equity Update Green County IT Oversight Committee | Confidential – For Committee Use Only | Page 5 of 9 Brodhead ￿ In Progress Notes Approval City council approved Approved at City council meeting May 18th Location Town Hall to downtown and Legion park Estimated Cost $32,424 TC Networks $2,000 electrical Deposit paid $18,662.90 to order equipment. Electrician Partnership: Brodhead Water & Light Utility and Cove’s Electric. Electrical work is complete, paid $2,000 Timeline Equipment has been ordered, and will be painted before installation TC working on installation Notes: City is interested in adding Security cameras as part of this installation, at their expense. Juda ￿ In Progress Approval School district approved Being installed by Vieth Consulting in Sept-Oct Location Park – standalone network Estimated Cost $3,144.96 Vieth-paid $1,456.00 Integral Building Systems Electrical Already in place, conduit in ground available Green County IT Oversight Committee | Public Wi-Fi & Digital Equity Update Green County IT Oversight Committee | Confidential – For Committee Use Only | Page 6 of 9 Timeline Vieth plans to install Sept-Oct. Albany Completed Project Status Installation complete Outstanding Item Waiting on bill from electrician Funding Paid via PSC Grant, ARPA funds approved for $1605 Electrical work. Cost final amount to be confirmed upon completion New Glarus ￿ In Progress Contact Kelsey Status Approved by Library board and Village Board July 15th Location Surrounding area around Library and downtown area Green County IT Oversight Committee | Public Wi-Fi & Digital Equity Update Green County IT Oversight Committee | Confidential – For Committee Use Only | Page 7 of 9 Electrician Clark Electric- $1,000 estimate approved Estimated Cost $15,916.44 TC Networks estimate approved Timeline Expected Fall installation . Brooklyn ￿ In Progress Contact Linda Status Approved by Village Board Next Step Electrical work complete, TC network working on install. Location Village Hall → Legion Park Electrician Brian Johnson- Electrical Dimensions- $1730 estimate Estimated Cost $9,389.36-TC Network Timeline Mid September Green County IT Oversight Committee | Public Wi-Fi & Digital Equity Update Green County IT Oversight Committee | Confidential – For Committee Use Only | Page 8 of 9 Notes: Monticello ￿ In Progress Contact Stephanie Status Approved by Village Board Location Village Hall → Main Street → Pool and Park Next Steps Ready for electrical work when mounting equipment comes Electrician Clark Electric Estimated Cost $18,170.06 TC Network estimate- pd $7910.25 toward cost to get equipment ordered. Timeline Fall: Sept-Oct. Notes: Green County IT Oversight Committee | Public Wi-Fi & Digital Equity Update Green County IT Oversight Committee | Confidential – For Committee Use Only | Page 9 of 9 Browntown ✗ Not Interested Status Municipality has declined to participate at this time Monroe ⏳ In Progress Location Contact / Partner Notes Status YMCA Luke Smetters TC estimate $5835.40 Site approved. Will do onsite with TC to finalize plan and see if electrical is needed. Monroe Public Library Suzann Holland Waiting on quote Site approved, in contact with their IT to finalize plan. Family Promise Wendy Currie TC Estimate $1779.78 Approved by Family Promise Board 9/3/26 Will do onsite with TC to finalize plan and see if electrical is needed. AI that Stops the Breach. Teachable Moments that Build the Workforce. Today’s most dangerous threat is the bad actor with the good identity. KnowBe4 Defend, KnowBe4’s inbound email security solution, moves beyond black-box decision-making. Using advanced AI and natural language processing (NLP), we map historical communication patterns to identify anomalies instantly. Defend makes smarter, more informed autonomous decisions to stop evolving polymorphic attacks faster than other email security layers. Highlights X 30% better threat detection X 95% operational time savings X 1.4 billion graymail messages filtered yearly The Defend Mean Time Suite (MTTX) MMTD (Detect) Behavioral AI catches zero-day BEC instantly. MTTT (Triage) Groups thousands of related alerts into one view. MTTI (Investigate) Syncs with Defender and PhishER Plus to hunt and remove inbox threats under two minutes. MTTC (Contain) Auto-removes threats to quarantine folders. MTTR (Respond) One-click remediation across all inboxes. Defend 1 Datasheet | AI that Stops the Breach. Teachable Moments that Build the Workforce. Marrying Technology with Human Intelligence Technology alone is not a silver bullet. The real win for modern organizations is gaining a stronger ROI on security training by marrying it to their existing technology. Defend bridges the gap between passive learning and active defense. Strategic Metrics To Track Defend allows your business to decouple growth from risk. As your headcount and revenue scale, your security incidents shouldn’t. Incident Growth vs. Company Growth Use behavioral AI and NLP to detect the 30%+ of sophisticated, polymorphic AI attacks that others miss. This ensures that increasing your headcount doesn’t lead to a corresponding spike in breach activity. Capacity Management Visualize productivity savings in relation to alerts. Removing the noise of more than 1.4 billion graymail messages yearly allows you to shift SOC focus to strategic matters. Automated Response vs. Human Response Create a Human-on-the-Loop model where Defend offloads the operational weight of triage to intelligent, autonomous systems. Detailed reporting provides visibility into which users are targeted and where to provide tailored, high-impact training. Real-Time Point-of-Risk Teachable Moments Combine security awareness training with real-time teachable moments to give your employees the tools they need where they need them. These moments add an extra layer of human intelligence to filter threats that technology alone can miss. 95% Operational Time Savings Move to a human-on-the-loop model where AI handles threat containment and triage, giving your SOC team back 95% of their time (saving a 1,000-user organization 45 hours of weekly response time). Detect the 30%+ of Sophisticated Threats that Others Miss with AI-Native Detection Remove more noise and detects more threats via full AI-native detection and zero manual configuration. By identifying anomalies in intent and relationship DNA, the inbound email security requires no manual configuration to stop complex BEC and supply chain attacks. 2 Datasheet | AI that Stops the Breach. Teachable Moments that Build the Workforce. AI-enabled Phishing Detection Defend delivers the highest efficacy of threat detection for your organization through a combination of self-learning techniques, pre-generative modeling, behavioral intelligence, language processing engines and automation. Adaptive Security Architecture Defend automatically improves security detection for each of your users based on calculations from all emails processed by Defend. Holistic Detection All aspects of an inbound email are analyzed in unison, enhancing detection efficacy for your organization versus traditional anti-phishing and malware products that analyze these in isolation. Contextual, Localized Teachable Moments Dynamic, localized color-coded banners and tags change based on the level of risk, offering clear explanations. Emails are delivered to users explaining why a threat was removed to further engage your users through real-time teachable moments. Machine Learning and Linguistic Analysis Self-learning technology develops baselines for your users’ behavior to detect and flag anomalous activity. Natural language processing (NLP) and natural language understanding (NLU) determine the emotion, intent and context behind every email, enabling the detection of unusual, suspicious and threatening behavior. Neutralize Malicious Code Active and malicious code is automatically disabled from HTML message body and attachments in your emails. SSO Enabled Integrates directly into your organization’s Single Sign On (SSO). Sender Analysis Sender policy verification lookup and validation are performed on every message for SPF, DKIM and DMARC to protect your organization. Link Rewriting Stops time-based attacks by rewriting links and checking at time-of-click via pre-delivery inline and post-delivery API deployments. Unsafe links are redirected to a warning page with easy-to-understand contextual details and used as teachable moments for your users. QR Code Detection Detects QR codes within email to warn your users of quishing attempts. Abuse Mailbox Automation Reduce your security overhead and time to respond with advanced AI-powered phishing investigation and remediation. Intelligent Graymail Detection Improve your users’ productivity and reduce your admin burden by automatically filtering graymail to a separate folder. Seamless Integration with Microsoft 365 and Google Workspace Integrates seamlessly into your Google Workspace and MS Outlook apps on Windows Desktop, Mac, iOS and Android, including integration with MS Safelinks. Defend operates after your SEG, and/or Google or Microsoft 365 has performed any analysis at the perimeter. Detailed Analytics The Security Center provides you with a single portal for risk analysis, reporting and incident triage, investigation and response for all your KnowBe4 Cloud Email Security products (Defend, Prevent, Protect), including a live threat feed. Key Product Features 3 Datasheet | AI that Stops the Breach. Teachable Moments that Build the Workforce. KnowBe4, Inc. | 33 N Garden Ave, Suite 1200, Clearwater, FL 33755 855-KNOWBE4 (566-9234) | www.KnowBe4.com | Sales@KnowBe4.com Other product and company names mentioned herein may be trademarks and/or registered trademarks of their respective companies. 1170 1026 Find out More “We recognized that one layer is not enough to detect and neutralize the numerous advanced phishing threats targeting GMMH day-to-day work. KnowBe4 Defend not only provides an additional layer of defense but also supplements our security awareness training. Defend’s clickable banners allow employees to continuously develop their cybersecurity awareness.” — Kevin Orritt, Cyber Security Manager, Greater Manchester Mental Health (GMMH) How Does KnowBe4 Defend Work? Page 1 S U M M A R Y O F State and Local Cybersecurity Grant Program (SLCGP) (Wisconsin) Wisconsin Emergency Management (WEM) The State and Local Cybersecurity Grant Program (SLCGP) provides funding to eligible state, local, and territorial (SLT) governments to manage and reduce systemic cyber risk, thus improving the security of critical infrastructure and improving the resilience of the services SLT governments provide their community. Wisconsin guidelines: In Wisconsin, the SLCGP is administered by Wisconsin Emergency Management (WEM) and the Division of Enterprise Technology (DET). Grant funding can be used on cybersecurity-related activities, including purchase and installation or activation of multifactor authentication (MFA) and managed detection and response (MDR). The following direct cost categories and related costs are allowable under this funding opportunity: Eligible activities with definitions include: • Internet edge security o Next-generation firewalls (NGFWs): Ability to inspect and filter traffic at Layers 3-7. o Firewall as a Service (FWaaS): A cloud-native firewall to enforce consistent policy on the internet connection. o Secure web gateway (SWG): Protects users from web-based threats, filters content, and enforces acceptable use policies; may include features like URL filtering, anti-malware, and application control. o DNS security: Could be bundled with NGFW or a separate service; protects against malicious domains, command and control callbacks, and phishing attempts at the DNS layer. o Web security (URL filtering): Could be bundled with NGFW or a separate service. o Email security: Appliance or service that blocks spam, phishing, and malware before reaching your mail server. o DDoS protection: Could be bundled with NGFW or a separate appliance/service. AUTHORITY PROGRAM SUMMARY Page 2 o Cloud-based edge security: Secure hybrid workforce. o Intrusion prevention system (IPS): Cloud-delivered threat detection and prevention. • Implementation assistance for migration to the .gov domain • Vendor expenses can be covered by the grant to assist the entity with the following: o .gov registration o Implementation of Multi-Factor Authentication (MFA), Managed Detection Response (MDR), Endpoint Detection and Response (EDR), and/or Extended Detection and Response (XDR). o Email migration • Vulnerability management o Automated tools to detect known vulnerabilities. Can be run in-house or performed by a vendor. The service provided must perform the scanning, assess the vulnerabilities, remediate or mitigate, and then rescan to verify remediation. • Immutable backups to the cloud o Immutable backups to the cloud are stored in a way that cannot be modified, deleted or overwritten for a defined length of time. • Security awareness and training programs o Some state contracts exist that are eligible for all SLTT entities. • Penetration testing o Helps to identify cybersecurity vulnerabilities using tools and social engineering. • Multifactor Authentication (MFA) o A multi-step account login process that requires users to enter more information than just a password. For example, along with the password, users might be asked to enter a code sent to their email, answer a secret question, or scan a fingerprint. • Managed Detection & Response (MDR) o Services monitor various areas like endpoints, networks, and cloud environments. • End Point Detection & Response (EDR) o Focuses on detecting and responding to threats on individual endpoints. • Extended Detection & Response (XDR) o Expands on EDR by integrating data from multiple sources (endpoints, cloud, network, etc.) • Recommended options for smaller entities with limited cybersecurity experience or limited bandwidth: • Cybersecurity training • Use CISA guidelines • MFA (multifactor authentication) • Implement .gov domain Page 3 Eligible government agencies include counties, municipalities, local public authorities, school districts, special districts, intrastate districts, councils of government, regional or interstate government entities, agencies or instrumentalities of a local government, authorized tribal governments and organizations, rural communities, unincorporated towns or villages, and other public entities. The State of Wisconsin has been allocated $2,174,642.31 for FY25. The maximum award is $100,000. This funding opportunity has no cost share or local match requirements. The current round of funding is for the FY24 federal allocation. The anticipated grant performance/budget period (grant period) is March 1, 2027 through August 31, 2028. Applications are due by October 30, 2026. The anticipated notice of award is February 15, 2027. Email for additional information: esdhelp@wisconsin.gov. Access the application the the Egrants online management system: https://wem.egrants.us/egmis/. To access the Egrants system, you will need an user identification and a password. If you do not currently have access to the Egrants system please see section D(5) “Other submission requirements” of this document for Egrants registration information and troubleshooting contact information. The State of Wisconsin has been allocated $5,806,564 for FY24 and $7,666,939 for FY23. Any entity that receives funds from a grant under this program may not use the grant for: • Supplanting state or local funds; • Recipient cost-sharing contributions; • Payment of a ransom from cyberattacks; ELIGIBILITY AWARD DESCRIPTION DEADLINE DESCRIPTION HISTORY OF FUNDING ADDITIONAL INFORMATION Page 4 • Recreational or social purposes, or for any purpose that does not address cybersecurity risks or cybersecurity threats on SLTT information systems; • Lobbying or intervention in federal regulatory or adjudicatory proceedings; • Suing the federal government or any other government entity; • Acquiring land or constructing, remodeling or altering buildings or other physical facilities; or • Cybersecurity Insurance; or • Any purpose that does not address cybersecurity risks or cybersecurity threats on information systems owned or operated by, or on behalf of, the eligible entity or a local government within the jurisdiction of the eligible entity. Marc Couturier Program Manager Wisconsin Emergency Management (WEM) Phone: 608-242-3258 Email: marc.couturier@widma.gov Program Page: https://wem.wi.gov/available-grants/Application Guidance: https://www.fema.gov/grants/preparedness/state-local-cybersecurity-grant-program/fy-25- nofoApplication Guidance: https://www.fema.gov/grants/preparedness/state-local-cybersecurity-grant- program/fy-24-nofoApplication Guidance: https://wem.wi.gov/wisconsin-emergency-management- wem-notice-of-funding-opportunity-nofo-state-local-cybersecurity-grant-program-slcgp-cycle-3-funding- fy2024/ *Consult the program guidance by following the links provided at the above URLs. Additional relevant POCs are provided in the program guidance. CONTACT WEB LINKS