To: Board of County Commissioners
Through: Phillip Savino, Director, Information Technology
Prepared By:
prepared
Phillip Savino, Director, Information Technology
end
presenter
Presenter: Phillip Savino, Director, Information Technology; Nikki Rosecrans, Chief Information Security Officer
end
Subject:
title
1:00 PM *Arapahoe County Cybersecurity Consortium Intergovernmental Agreement
end
Purpose and Request:
recommended action
The purpose of this meeting is to brief the Board of County Commissioners on the Arapahoe County Cybersecurity Consortium Intergovernmental Agreement (IGA), which establishes a collaborative framework for participating government and quasi-government partners to share cybersecurity information, coordinate response efforts, support regional planning and exercises, and strengthen cybersecurity resilience across Arapahoe County.
The Director of Information Technology (IT) and Chief Information Security Officer respectfully request the Board of County Commissioners’ approval of the IGA to authorize Arapahoe County’s participation in the Arapahoe County Cybersecurity Consortium and authorization for the Director of IT to sign the IGA and any related agreements.
end
Alignment with Strategic Plan: Sustainable Growth and Infrastructure - Strengthen city-county partnerships to create aligned and effective investments.
Background and Discussion: The Arapahoe County Cybersecurity Consortium (Consortium) is a proposed partnership among government and quasi-government agencies located or operating in Arapahoe County. The Consortium is intended to strengthen regional cybersecurity preparedness by creating a formal structure for members to share information on cyber threats, coordinate incident response when possible, participate in joint planning and exercises, and explore shared training or cybersecurity resources. The IGA establishes the purpose, membership requirements, confidentiality expectations, and general operating framework for the Consortium. It does not create a financial obligation for the County or participating members unless a separate agreement is negotiated and approved for a specific project or service. Board approval and authorization for the Director of IT to sign the IGA and related agreements are requested to authorize Arapahoe County’s participation in the Consortium.
Alternatives: If the Board of County Commissioners does not approve and sign the IGA, Arapahoe County would not formally participate in the Arapahoe County Cybersecurity Consortium. As a result, the County would not be included in the formal structure for regional cybersecurity information sharing, coordinated incident response, joint planning, exercises, resource requests, or potential shared training and procurement opportunities under the IGA. Cybersecurity coordination with other jurisdictions could still occur on an informal or case-by-case basis, but without the confidentiality protections, expectations, and operating framework established by the Consortium. There is no immediate financial impact from not approving the IGA; however, the County may lose opportunities to improve regional readiness, leverage shared resources, participate in joint grant or procurement efforts, and strengthen coordinated response to cyber threats affecting local government partners in and around Arapahoe County.
Fiscal Impact: None.
Alignment with Strategic Implementation Strategies: N/A.
Staff Recommendation: The Information Technology Department recommends that the Board of County Commissioners approve and authorize Phil Savino to sign the Arapahoe County Cybersecurity Consortium Intergovernmental Agreement and any related agreements to authorize County participation in regional cybersecurity collaboration, preparedness, information sharing, and incident response coordination.
Concurrence: The City of Aurora, City of Centennial, Cherry Hills Village, City of Sheridan, City of Littleton, City of Greenwood Village, and City of Englewood concur with and agree to participate in the Arapahoe County Cybersecurity Consortium Intergovernmental Agreement. Each participating jurisdiction will execute the agreement through its authorized signing authority, confirming its commitment to the purposes of the Consortium, including cybersecurity information sharing, coordinated planning, regional preparedness, and incident response collaboration.