Memorandum
Date: February 25, 2025
To: The Honorable Lake County Board of Supervisors
From: Shane French, Information Technology Director
Subject: Consideration of Section 19.3 of the “Board of Supervisors, County of Lake, CA Policies and Procedures Manual,” Multi-Factor Authentication (MFA) Policy
Executive Summary:
In response to increasing and evolving information security threats, additional measures are required to promote integrity and availability of County Information Systems. Requiring multiple inputs to confirm the identify of a user (“Multiple Factor Authentication” or MFA) will materially reduce the vulnerability of County data and systems, promoting continuity of service availability while better safeguarding information under the County’s care. The purpose of this policy is to instruct departments and employees on how MFA will be implemented within the county.
The MFA policy will ensure that MFA is applied to County systems, and that expectations for County Information Systems users are clearly communicated and defined.
We are recommending that your Board approve the MFA policy as section 19.3 “Multifactor Authentication (MFA)” in the Board of Supervisors, County of Lake, CA Policies and Procedures Manual.
If not budgeted, fill in the blanks below only:
Estimated Cost: ________ Amount Budgeted: ________ Additional Requested: ________ Future Annual Cost: ________
Purchasing Considerations (check all that apply): ☐ Not applicable
☐ Fully Article X. <https://library.municode.com/ca/lake_county/codes/code_of_ordinances?nodeId=COOR_CH2AD_ARTXPU_S2-38EXCOBI>- and/or Consultant Selection Policy <http://lcnet.co.lake.ca.us/Assets/Intranet/Policy/Policies+$!26+Procedures+Manual/Ch4_2021v2.pdf>-Compliant (describe process undertaken in “Executive Summary”)
☐ Section 2-38 <https://library.municode.com/ca/lake_county/codes/code_of_ordinances?nodeId=COOR_CH2AD_ARTXPU_S2-38EXCOBI> Exemption from Competitive Bidding (rationale in “Executive Summary,” attach documentation, as needed)
☐ For Technology Purchases: Vetted and Supported by the Technology Governance Committee <http://lcnet.co.lake.ca.us/Assets/Intranet/Intranet+Forms/Information+Technology/AdvPlan.pdf> (“Yes,” if checked)
☐ Other (Please describe in Executive Summary)
Consistency with Vision 2028 <http://www.lakecountyca.gov/Government/Directory/Administration/Visioning/Vision2028.htm> (check all that apply): ☐ Not applicable
☐ Well-being of Residents ☐ Public Safety ☒ Disaster Prevention, Preparedness, Recovery
☐ Economic Development ☐ Infrastructure ☒ County Workforce
☐ Community Collaboration ☐ Business Process Efficiency ☐ Clear Lake
Recommended Action:
By motion, approve Section 19.3 Multifactor Authentication (MFA) Policy.