Skip to main content
powered help
header-left header-center header-right
File #: 250815    Version:
Type: Resolution Status: Passed
File created: 9/2/2025 In control: FINANCE & PERSONNEL COMMITTEE
On agenda: Final action: 9/23/2025
Effective date:    
Title: Substitute resolution relating to required cybersecurity training for City employees.
Sponsors: ALD. SPIKER
Indexes: EMPLOYEES - TRAINING, SECURITY MEASURES
Attachments: 1. Cybersecurity_Summary_Report, 2. AwareEd-dashboard-2024-9-16-2025, 3. PhishSim-dashboard-2025-9-16-2025 (1), 4. Hearing Notice List
Date Ver.Action ByActionResultTallyAction DetailsMeeting DetailsVideo
9/29/20251 MAYOR SIGNED   Action details Meeting details Not available
9/23/20251 COMMON COUNCIL ADOPTEDPass15:0 Action details Meeting details Not available
9/17/20251 FINANCE & PERSONNEL COMMITTEE RECOMMENDED FOR ADOPTION

Minutes note: This item was taken out of order and considered following item 1, CCFN 250668. Appearing: David Henke, ITMD Ald. Spiker presented.
Pass5:0 Action details Meeting details Video Video
9/16/20251 CITY CLERK DRAFT SUBMITTED   Action details Meeting details Not available
9/5/20250 COMMON COUNCIL REFERRED TO   Action details Meeting details Not available
Number
250815
Version
SUBSTITUTE 1
Reference

Sponsor
ALD. SPIKER
Title
Substitute resolution relating to required cybersecurity training for City employees.
Analysis
This resolution directs the Department of Administration - Information Technology and Management Division to develop a mandatory cybersecurity training program for all City employees.
Body
Whereas, The Department of Administration - Information Technology Management Division (ITMD) supports and maintains the computing infrastructure for most City departments, including the management of email, support for the City's internet site and web-based applications, and the implementation of anti-virus and malware protection; and

Whereas, Phishing, ransomware, and other cybersecurity threats are increasingly targeted towards municipal governments; and

Whereas, Recent phishing test emails that were sent to City employees resulted in an uncomfortably high failure rate; now, therefore, be it

Resolved, By the Common Council of the City of Milwaukee, that the Department of Administration - Information Technology Management Division shall develop a cybersecurity training program within 90 days of adoption of this resolution; and, be it

Further Resolved, That the cybersecurity training program shall be mandatory for all City employees that have City issued email accounts; and, be it

Further Resolved, That the cybersecurity training program shall include the compilation of data for each City department, including the percentage of employees per department that completed the training and the percentage of employees per department that passed subsequent tests and evaluations; and, be it

Further Resolved, That the Department of Administration - Information Technology Management Division shall communicate a summary of the cybersecurity training program to the Finance and Personnel Committee within 90 days of adoption of this resolution; and, be it

Further Resolved, That the Department of Administration...

Click here for full text