OPENPUBLICA · PUBLIC MEETING RECORD
Record of Proceedings

Joplin City Council Informal Meeting - January 6, 2025

City CouncilMonday, January 6, 2025
BodyJoplin, Missouri
SessionCity Council
DateMonday, January 6, 2025
StatusFILED
Video Record

STREAMING COPY IN PREPARATION — RECORDING AVAILABLE FROM THE ORIGINAL SOURCE

Transcript — Verbatim
0:02

Good evening, everyone, and welcome to the informal meeting of the Joplin City Council on this Monday, January 26 January 6th in the new year of 2025.

0:13

Let's get started on our agenda.

0:15

We have a Raven Eye update.

0:17

Good evening, Mark.

0:19

Good evening, Mayor, Council, Raven Eye minus Raven Eye.

0:23

You may remember that uh a colleague Tyler lives in Wichita, and the other folks from Raven I live in Kansas City.

0:31

That's why they're not here.

0:33

Can't get here.

0:34

It's just a little snow.

0:35

It's just a little snow.

0:36

I told I told him, you know, just had to get him random snowplow and get him down here.

0:41

They could have slept at like six this morning.

0:43

They'd have been here by now.

0:45

Um no.

0:46

I I told him not even not even to worry about it.

0:49

I talked with them over the phone though, and we talked about all of uh the slides we're gonna go through.

0:54

So um the things that we've been working on together.

0:59

We've finalized an incident response plan, and I presented that to management team a couple of times.

1:06

Let them look through that um links to that document.

1:10

So we will uh more formally bring that to one of the management team meetings.

1:14

The Raven I folks will join us by way of Teams.

1:17

We'll talk through that document some more.

1:20

Um we are gonna do another backup restoration test.

1:24

You're gonna see a slide, and you see it every time we come up here about how good the backups are, but every every year we also do a test.

1:31

So in the first quarter, we're gonna restore of all the thousands of files that they got out there, and we're gonna make sure what they're backing up is what we want.

1:42

Um they launched, which is on an upcoming slide here.

1:46

I won't be able to speak a lot to it, but it's it's a project management platform basically, so they can do sort of a Gantt chart of our projects as they see them moving forward and make sure that the incident response plan is you know here on time and at this milestone on time, and so they've started a platform which is uh one of the upcoming slides, and then we just made a couple of um formatting changes to the acceptable use and the antivirus policy.

2:17

Um this is the project management platform that um Raven I is gonna be using and is basically just to give us an idea of how many action items we have and where they are and what percentage complete and where they're moving along in the in the uh timeline.

2:35

The uh security operations center, that report uh basically we've um ticked up just a little bit on the lower end of the vulnerability scale.

2:46

The low and the mediums are up just a little bit from last month, but the critical the highs and the criticals are down, so that's that's that's good news actually.

2:56

And we want them to be going that direction.

2:59

We'd like them all to be going that direction, but you know, you so many balls in the air.

3:04

Um this report uh is a little interesting is that the vulnerability rating um they had to actually um go down to seven.

3:18

Uh we didn't have any between seven and ten, so they actually had to go from the low end to seven to get a top ten list.

3:26

So that's what we're looking at there.

3:28

So and that's actually uh a pretty good scale.

3:31

Um I'm I'm happy with that one.

3:34

Um the firewall, they just did an upgrade on the firewall and the software.

3:40

It is at the most current level.

3:44

Um there are I can't even see that.

3:50

Sorry.

3:51

Um the top IP addresses that are blocked are up there in the right-hand corner.

3:59

Um the connection down on the firewall task in the lower right.

4:06

So um basically what that's telling us is everything that's getting to us.

4:10

Um, we're we're blocking it, and they're doing a really good job at it.

4:16

Um the endpoint protection basically is what's landing on folks' machines, and basically nothing.

4:22

There's uh an ATT program, probably having to do with we use a uh product called Netmotion that does uh network management.

4:34

Um it could be uh actually looking at an ATT phone bill and being wallpaper.

4:41

So basically out of 488 devices.

4:44

We had a couple of instances of you know, 17 instances of basically just unwanted pop-up programs.

4:51

So that's very good considering 107 million files it's been looking at.

4:57

Um that was the backup slide I was talking about.

5:00

Everything is exactly where we want it to be.

5:03

Um, and we are storing some 65 terabytes of data offline with Raven Eye, and that's um big old mountain of data.

5:14

Patching is actually the best slide of this whole mix.

5:18

This is very, very, very good.

5:20

All of these are below one.

5:23

Um this is extremely good.

5:27

It shows that we have a product um that we use for automated patching.

5:32

And um the 93 devices offline basically at this time of the year, we've replaced anywhere from 75 to 100 plus machines in the last calendar year or so.

Discussion Breakdown — Share of Meeting
Parks and Recreation█████████████████████████████████████████████61%
Technology and Innovation█████████████████████████████39%
Summary of Proceedings

Joplin City Council Informal Meeting - January 6, 2025

The Joplin City Council held an informal meeting on Monday, January 6, 2025, to receive updates on cybersecurity operations and a cost comparison for parks mowing. Council members asked clarifying questions and requested additional data.

Discussion Items

Raven Eye Cybersecurity Update

  • Mark (IT) presented the Raven Eye update on behalf of the vendor, covering the finalized incident response plan, upcoming backup restoration test, and a new project management platform.
  • Security operations report: vulnerability counts increased on low/medium range but critical/high decreased; no vulnerabilities rated 7-10, so the top-ten list started at 7.
  • Firewall software upgraded to current level; endpoint protection blocked 17 pop-ups across 488 devices out of 107 million files scanned.
  • Backup system stores 65 terabytes offline with Raven Eye; patching metrics show all scores below 1, with 93 offline devices likely replaced.
  • Grant-funded in-person training was pulled by DHS because it had not been invoiced; staff will seek alternatives.
  • Multi-factor authentication at hardware level will be activated for department heads.
  • Council asked about frequency; Mark noted they moved to semi-annual updates, and the cybersecurity platform will go out for bid after the firewall monitoring contract ends in February.

Parks Mowing Privatization Comparison

  • Mr. Paul (Parks Director) presented a comparison of in-house mowing vs. contracting out.
  • Current operations: 24 parks and other green spaces totaling over 900 acres; 25-week season with a 10-day mowing rotation, covering about 16,000 acres per season.
  • In-house costs: 9 full-time and 8 part-time staff; weekly cost $11,500; total $288,000 per season; average $17.65 per acre.
  • Contracted mowing quotes ranged from $60 to $140 per acre, yielding season costs between ~$1 million and $2.3 million.
  • Mr. Paul noted equipment/fuel costs not factored; estimated an additional ~$100,000, bringing in-house total to ~$400,000.
  • Councilman Jackson requested a full cost analysis including equipment, fuel, insurance, and workers' comp to enable an apples-to-apples comparison.
  • Councilman Coppel suggested a tiered park maintenance approach based on usage and activity to allocate resources more efficiently.
  • Councilwoman Carlin asked about native grass areas; Mr. Paul responded that Joplin Creek area will be maintained with native plants and mowed annually.

Key Outcomes

  • No formal votes were taken; the meeting was informational.
  • Mark will provide updated cost figures for full in-house mowing costs to Councilman Jackson.
  • Mr. Paul will explore the tiered park maintenance concept and discuss with the Park Board.
  • The city will continue with Raven Eye and consider future contract bidding after February.

Meeting Transcript

Good evening, everyone, and welcome to the informal meeting of the Joplin City Council on this Monday, January 26 January 6th in the new year of 2025. Let's get started on our agenda. We have a Raven Eye update. Good evening, Mark. Good evening, Mayor, Council, Raven Eye minus Raven Eye. You may remember that uh a colleague Tyler lives in Wichita, and the other folks from Raven I live in Kansas City. That's why they're not here. Can't get here. It's just a little snow. It's just a little snow. I told I told him, you know, just had to get him random snowplow and get him down here. They could have slept at like six this morning. They'd have been here by now. Um no. I I told him not even not even to worry about it. I talked with them over the phone though, and we talked about all of uh the slides we're gonna go through. So um the things that we've been working on together. We've finalized an incident response plan, and I presented that to management team a couple of times. Let them look through that um links to that document. So we will uh more formally bring that to one of the management team meetings. The Raven I folks will join us by way of Teams. We'll talk through that document some more. Um we are gonna do another backup restoration test. You're gonna see a slide, and you see it every time we come up here about how good the backups are, but every every year we also do a test. So in the first quarter, we're gonna restore of all the thousands of files that they got out there, and we're gonna make sure what they're backing up is what we want. Um they launched, which is on an upcoming slide here. I won't be able to speak a lot to it, but it's it's a project management platform basically, so they can do sort of a Gantt chart of our projects as they see them moving forward and make sure that the incident response plan is you know here on time and at this milestone on time, and so they've started a platform which is uh one of the upcoming slides, and then we just made a couple of um formatting changes to the acceptable use and the antivirus policy. Um this is the project management platform that um Raven I is gonna be using and is basically just to give us an idea of how many action items we have and where they are and what percentage complete and where they're moving along in the in the uh timeline. The uh security operations center, that report uh basically we've um ticked up just a little bit on the lower end of the vulnerability scale. The low and the mediums are up just a little bit from last month, but the critical the highs and the criticals are down, so that's that's that's good news actually. And we want them to be going that direction. We'd like them all to be going that direction, but you know, you so many balls in the air. Um this report uh is a little interesting is that the vulnerability rating um they had to actually um go down to seven. Uh we didn't have any between seven and ten, so they actually had to go from the low end to seven to get a top ten list. So that's what we're looking at there. So and that's actually uh a pretty good scale. Um I'm I'm happy with that one. Um the firewall, they just did an upgrade on the firewall and the software. It is at the most current level. Um there are I can't even see that. Sorry. Um the top IP addresses that are blocked are up there in the right-hand corner. Um the connection down on the firewall task in the lower right. So um basically what that's telling us is everything that's getting to us. Um, we're we're blocking it, and they're doing a really good job at it. Um the endpoint protection basically is what's landing on folks' machines, and basically nothing. There's uh an ATT program, probably having to do with we use a uh product called Netmotion that does uh network management. Um it could be uh actually looking at an ATT phone bill and being wallpaper. So basically out of 488 devices. We had a couple of instances of you know, 17 instances of basically just unwanted pop-up programs.

SUMMARIZED BY OPENPUBLICA AI
TRANSCRIPT VIA PUBLIC VIDEO
openpublica.com