HomeMy WebLinkAbout2024 12 09 Consent 303 - Adoption of Resolution 2024-44 adopting a Cybersecurity Framework as required by Section 282.3185(4), Florida StatutesCONSENT AGENDA ITEM 303
CITY COMMISSION AGENDA | DECEMBER 9, 2024 REGULAR MEETING
TITLE
Adopt Resolution 2024-44 adopting a Cybersecurity Framework as required by Section
282.3185 (4), Florida Statutes.
SUMMARY
Florida Statute 282.3185 (4) Cybersecurity Standards states:
(a) Each local government shall adopt cybersecurity standards that safeguard its data,
information technology, and information technology resources to ensure availability,
confidentiality, and integrity. The cybersecurity standards must be consistent with
generally accepted best practices for cybersecurity, including the National Institute of
Standards and Technology Cybersecurity Framework.
(b) Each county with a population of 75,000 or more must adopt the cybersecurity
standards required by this subsection by January 1, 2024. Each county with a
population of less than 75,000 must adopt the cybersecurity standards required by
this subsection by January 1, 2025.
(c) Each municipality with a population of 25,000 or more must adopt the cybersecurity
standards required by this subsection by January 1, 2024. Each municipality with a
population of less than 25,000 must adopt the cybersecurity standards required by
this subsection by January 1, 2025.
(d)Each local government shall notify the Florida Digital Service of its compliance with
this subsection as soon as possible.
FUNDING SOURCE
RECOMMENDATION
Staff recommends the City Commission approve the adoption of the National Institute
of Standards and Technology Cybersecurity Framework as our official governing
standard for the IT Department, and authorize the IT Manager to complete and submit
the Local Governance Cybersecurity Standards Attestation Form via the Florida Digital
Service online portal, and approve the Interim City Manager and City Attorney to
prepare and execute any documents consistent with this agenda item to the extent
necessary.
56
City of Winter Springs
Resolution 2024-44
Page 1 of 2
RESOLUTION NO. 2024-44
A RESOLUTION OF THE CITY COMMISSION OF THE CITY OF
WINTER SPRINGS, SEMINOLE COUNTY, FLORIDA; ADOPTING A
CYBERSECURITY STANDARD IN ACCORDANCE WITH SECTION
282.3185(4), FLORIDA STATUTES; PROVIDING FOR
NOTIFICATION TO THE FLORIDA DIGITAL SERVICE; PROVIDING
FOR REPEAL OF PRIOR INCONSISTENT RESOLUTIONS,
SEVERABILITY AND AN EFFECTIVE DATE.
WHEREAS, pursuant to Section 282.3185(4), the City of Winter Springs is required to
adopt a cybersecurity standard that safeguards its data, and information technology resources to
ensure availability, confidentiality, and integrity consistent with generally accepted best practices
for cybersecurity, including the National Institute of Standards and Technology Cybersecurity
Framework; and
WHEREAS, upon adoption of a cybersecurity standard, the City of Winter Springs is
required to notify the Florida Digital Service of its compliance with Section 282.3185(4), Florida
Statutes; and
WHEREAS, in accordance with the requirements of Section 282.3185(4), and based on the
input and advice of City staff and evaluation by the City Commission, the City Commission finds
that it is in the best interests of the City and the public health, safety, and welfare of the citizens
of Winter Springs to adopt the National Institute of Standards and Technology Cybersecurity
Framework; and
NOW THEREFORE, BE IT RESOLVED by the City Commission of the City of Winter Springs,
Florida:
Section 1. Recitals. The foregoing recitals contained in the preamble to this Resolution are
incorporated by reference herein.
Section 2. Approval of Cybersecurity Standard; Notification to State. The City
Commission of the City of Winter Springs hereby adopts the National Institute of Standards and
Technology (“NIST”) Cybersecurity Framework as the City’s cybersecurity standard. The NIST
standard shall govern the development and implementation of the City’s future cybersecurity
policies and practices and decision making. Such policies, practices, and decisions shall be
deemed confidential to the extent required by Section 119.0725, Florida Statutes and other
applicable law. The City Manager is hereby authorized and instructed to notify the Florida Digital
Service of the City Commission’s decision to adopt the NIST Cybersecurity Framework as required
by Section 282.3185, Florida Statutes.
Section 3. Repeal of Prior Inconsistent Resolutions. All resolutions or parts of resolutions
in conflict herewith are hereby repealed to the extent of the conflict.
57
City of Winter Springs
Resolution 2024-44
Page 2 of 2
Section 4. Severability. If any section, subsection, sentence, clause, phrase, word or portion
of this Resolution is for any reason held invalid or unconstitutional by any court of competent
jurisdiction, such portion shall be deemed a separate, distinct and independent provision and such
holding shall not affect the validity of the remaining portion hereto.
Section 5. Effective Date. This Resolution shall become effective immediately upon adoption
by the City Commission of the City of Winter Springs, Florida.
ADOPTED in a Regular Meeting of the City Commission of the City of Winter Springs, Florida, this
9th day of December, 2024.
__________________________________________
Kevin McCann, Mayor
ATTEST:
_________________________________
Christian Gowan, City Clerk
Approved as to legal form and sufficiency
For the City of Winter Springs only by:
__________________________________
Anthony A. Garganese, City Attorney
58