Former Hoover Mayor Frank Brocato and the city’s current administration are trading accusations over whether a 2024 report identifying weaknesses in Hoover’s technology systems was properly disclosed before Mayor Nick Derzis took office.The City of Hoover issued a rebuttal Thursday to comments Brocato made to the Hoover Sun, accusing the former mayor of withholding a Kroll IT assessment for 15 months and failing to disclose its existence to Derzis or members of the city council.The response comes after Brocato disputed allegations made earlier in the week by Derzis and other city officials, saying he had informed Derzis, members of the city council and other officials about concerns surrounding the city’s finances and technology systems.”I would like to set the record straight,” Brocato said in a written statement to the Hoover Sun.”When financial accounting and IT concerns were identified, I immediately informed then-Police Chief Nick Derzis and the city council.”Brocato told the Hoover Sun that then-CFO Jennifer Cornett met individually with council members about financial matters, including Kroll’s findings. He also said Cornett and then-Treasurer Robert Yeager met with Derzis and transition chairman Michael Davis and provided a copy of the draft IT assessment on a thumb drive before Derzis took office.The city disputes Brocato’s characterization of that handoff.According to the city, two city employees independently approached Derzis and Davis less than two weeks before Derzis took office and gave them a copy of the report on a thumb drive. The city said the employees told Derzis and Davis they were acting on their own and feared reprisal.”Mr. Brocato now presents that handoff as his administration’s disclosure,” the city said in a release.”It was nothing of the kind.”The city also disputed in its news release Brocato’s assertion that the city council had been informed about the assessment.In the news release, Council President Casey Middlebrooks, who served on the council during Brocato’s administration, said he did not know Kroll had conducted an assessment of the city’s IT operations or identified vulnerabilities until City Attorney Charlie Waldrep informed him after Derzis’ inauguration.”I recognize the need to protect sensitive cybersecurity information,” Middlebrooks said.”But the council has oversight responsibility, and protecting information from the public is different from informing the elected body charged with governing the city.”Councilman Steve McClinton, who also served during Brocato’s administration, said the council was briefed only after Derzis took office, according to the city.What the Kroll report foundThe dispute centers on a July 26, 2024, draft report from Kroll, which conducted a high-level review of the city’s IT operations.In the report, Kroll described the review as an IT pre-assessment, rather than a formal IT audit. It examined 16 areas of Hoover’s technology operations to determine the city’s readiness for a formal audit and identify areas requiring corrective action.The assessment found that an IT risk assessment had not been conducted and recommended that the city develop an incident response plan, disaster recovery plan and business continuity plan. Kroll also recommended updating network diagrams and server systems and updating IT policies and procedures.The report said a disaster recovery plan had been drafted but was not finalized and that the city did not have a business continuity plan.Brocato told the Hoover Sun the assessment was handled responsibly and that, to his knowledge, Kroll never issued a final written IT assessment.”What I received was a preliminary draft identifying operational, management and cybersecurity concerns,” Brocato said.”The findings and deficiencies were disclosed and discussed with appropriate city officials, including Derzis and Michael Davis.”Brocato also said distribution of the written report was restricted because it contained information about vulnerabilities that could expose city computer systems to cybercriminals. He also said corrective actions were implemented or underway before he left office.Derzis disputed that characterization in the city’s news release.”The first I heard of the Kroll IT report was when two city employees brought it to my attention, less than two weeks before I took office,” Derzis said.”The former mayor did not send them.”Derzis also pointed to Hoover receiving more than $600,000 in equipment and services through the State and Local Cybersecurity Grant Program as evidence that deficiencies still needed to be addressed. He said the assistance comes at no cost to Hoover taxpayers.Dispute over transitionBrocato also told the Hoover Sun that Waldrep received a copy of the draft IT assessment from the former city attorney Nov. 10, during the first month of the Derzis administration.In their release, the city acknowledged that the former city attorney provided Waldrep the report but said it happened only after Waldrep requested it and a week after Derzis was sworn in.Brocato told the Hoover Sun that it was inaccurate to characterize the matter as concealed because Derzis and members of his transition team had access to city officials and information before he took office.According to the city, there was no meeting or briefing between Brocato and Derzis during the transition and that Brocato’s only contribution to the transition was a congratulatory letter.Brocato told the Hoover Sun he sent that letter offering to discuss concerns or answer questions.”A simple telephone call between friends who have worked together for 50 years could have addressed many of these matters without the public accusations and attacks on my integrity,” Brocato said.Derzis, however, accused his predecessor of failing to address the problems identified in the Kroll assessment.”Mr. Brocato can keep attempting to whitewash his past inaction,” Derzis said in the city’s news release.”We are busy fixing the problems he failed to address.”Read the original article on al.com. Add al.com as a Preferred Source by clicking here.
——————————————————-
Click Here For The Original Source.
