Cybersecurity update from Minnesota’s chief information security officer

Federal News Network reports

When it comes to cybersecurity, Minnesota has been ahead of the curve.

It used grant money from the Department of Homeland Security and other funding to create MNet – an enterprise telecommunications network that connects state and local government and education offices throughout the state.

Now, Minnesota is taking the “whole of state” cybersecurity effort even further.

John Israel, the state’s chief information security officer, said their updated approach is based across several pillars.

“One was really creating a baseline of cybersecurity for local government and critical infrastructure, so getting resources to do assessments, understanding baseline controls, policies, standards, and ensuring that everybody has access to resources to build a security program,” Israel said on Ask the CIO. “Second tier was really bringing some advanced control security capabilities to these local governments, so looking at the buying power that the state has and the ability to really take enterprise class capabilities and bring them to even the smallest local government that may not even have an IT team, much less a cybersecurity team, and help them see the benefits of those capabilities within their program. The third part was bringing in cyber navigators. We brought in a team of cyber advisors that can really get to know and build the relationship with those local governments. It’s not a one and done and it’s not just that you’re getting outreach or you got the nebulous, ‘the state is doing something for you.’ You actually get to know a navigator that can help understand your unique needs.”

Minneapolis City Council member details rules surrounding council votes related to data centers: What is the difference between legislative authority and quasi-judicial authority?

This article got to be much longer than originally planned. It starts with a letter to the editor from an elected official that raised questions for me on specific rules for city councils and whether each city council was beholden to the same rules. The librarian in me just had to share what I learned and the resources I used – starting with the Minnesota Legislative Reference Library.

A letter to the editor from a City Council member

The Minneapolis Times published a letter from Minneapolis City Council member, on his prescribed role dealing with a recently proposed data center. I didn’t know the rules for various votes. His need to speak up, also tells a story about the passion constituents are feeling about data centers…

My office has received a lot of correspondence pertaining to the proposed data center on the Star Tribune site and the community has repeatedly asked (and in some cases demanded) me to come out against this project. I want to take a moment to explain the difference between the city council’s votes on legislative policy versus a land use item such as the Star Tribune data center application which is considered a quasi-judicial vote.

A proposed policy item, like the proposed citywide data center ordinance, is legislative in nature and I am free to express my policy views, however, pending land use applications are like a court proceeding and are classified as quasi-judicial. Our City Attorney reminds us that in quasi-judicial matters we must avoid any prejudgment and if we express our position prior to the council voting on the item, we will be disqualified from voting on it and will be forced to recuse ourselves from that vote.

What is the difference between legislative authority and quasi-judicial authority?

I read this and I realized, I don’t know enough about the different kinds of votes. The League of Minnesota Cities Planning and Zoning 101 was a good refresher (or primer). Here’s specifically what it says about legislative authority and quasi-judicial authority…

Legislative authority

When creating, adopting, and amending land use plans and zoning ordinances, a city is making law by exercising so-called “legislative” authority. The council sits as a body of elected representatives to make plans and laws (ordinances) for the entire community to advance health, safety, and welfare.

When acting legislatively, a city council can engage in far-ranging policy discussion, and sort through competing views about what plans and laws would be in the best interest of the city. Although not everyone may be on board with the outcome, the more public participation in the law-making stage, the better the understanding among the public of why the city has a particular plan or law in place.

The council has broad discretion when acting legislatively, and any reviewing court will give the city considerable deference.

Pyramid of discretion

Quasi-judicial authority

In contrast, when applying existing plans and laws, a city council exercises so-called “quasi-judicial” authority. The limited task is to determine the facts associated with a particular request, and then apply those facts to the relevant law. A city council has less discretion when acting quasi-judicially, and a reviewing court will examine whether the city council applied rules already in place to the facts before it.

It can be helpful to visualize this as a “pyramid of discretion,” showing cities have greater discretion when making land use decisions at the base of the triangle, and less as decision-making moves up the pyramid. Discretion is greatest when officials are creating local laws and the least when officials are administering those laws.

Land use disputes arise most often when a city is applying laws, rather than when making law. But a city usually has less ability to address the root of the dispute when applying the law, than it would when making the law in the first instance.

Must all city council abide by the same rules?

Once again, the League of Minnesota Cities (LMC) has helpful information in the Handbook for Minnesota Cities: Chapter 13: Comprehensive Planning, Land Use and City-Owned Land. The quick answer is that it’s different outside the seven-county metro area…

Cities are granted the authority to regulate land use by the Municipal Planning Act. Cities outside the seven-county metro area are not required to regulate land use. For those cities engaged in land use regulation, the Municipal Planning Act provides the framework that all cities must follow. Cities regulate land use through three basic tools:
• The comprehensive plan.
• The zoning ordinance.
• The subdivision ordinance.

I won’t dive into the nitty gritty, but I will say LMC recommends having the comprehensive plan to guide decisions. They outline best practices for the creation and process. And then they do the same for zoning and subdivision ordinances. The detail they provide makes is difficult to summarize but would also make it helpful to apply to a situation on the frontlines.

Coon Rapids Police detail work 911 works for calls and how AI helps with non-emergency calls (Anoka County)

MinneapoliMedia reports...

Coon Rapids police are reminding residents what happens when they call 911, when they should instead use Anoka County’s non-emergency line, and how a newer artificial intelligence-assisted system now fits into the county’s emergency communications operation.

They do it all in a clean graphic.

EVENT Oct 5, 2026: Bridging the Digital Divide Virtual Conference 2026: AI Behind and Beyond the Walls of Our Prisons and Jails

From the NDIA listserv…

Join us for Bridging the Digital Divide Virtual Conference 2026 featuring Jeffrey Abramowitz, J.D. presenting:
Bridging the Digital Divide: AI Behind and Beyond the Walls of Our Prisons and Jails
📅 Monday, October 5, 2026
⏰ 8:00–9:00 a.m. MT
💻 Online
Explore how AI and digital literacy can expand opportunities for education, workforce readiness, and successful reentry.
Learn more & register: https://lnkd.in/g-dsWHwx

MNIT activates statewide cybersecurity response to support affected communities and protect critical infrastructure

A press release from MNIT

A coordinated cyberattack targeted operational technology at more than 30 Minnesota community water systems on July 26 and 27. Minnesota IT Services (MNIT) immediately activated the state’s cybersecurity incident response capabilities. MNIT continues to collaborate with federal, state, local, Tribal, and private-sector partners to investigate the attack, support affected communities, and strengthen the security of Minnesota’s critical infrastructure.

As MNIT cybersecurity teams assess the cyber impacts, they are sharing threat intelligence, providing guidance on response efforts and best practices, and helping affected utilities contain, investigate, and remediate damages from the attack. MNIT is working closely with Minnesota Department of Public Safety, Bureau of Criminal Apprehension’s Minnesota Fusion Center, Minnesota Department of Health, Minnesota Pollution Control Agency, Cybersecurity and Infrastructure Security Agency, U.S. Environmental Protection Agency, Federal Bureau of Investigation, and local water utilities throughout the response.

The investigation remains active, and responders continue to assess affected systems. The Minnesota Department of Health continues to work directly with affected water systems to help ensure public health remains protected. At this time, they are not aware of any active requests from Minnesota cities to have their residents modify their drinking water usage.

“Cyberattacks against critical infrastructure require a coordinated, whole-of-government response,” said John Israel, MNIT Assistant Commissioner and Minnesota Chief Information Security Officer. “MNIT is working side by side with our partners to share intelligence, support affected communities, and help utilities restore operations safely while strengthening defenses against future attacks. This incident demonstrates why Minnesota has invested in strong cybersecurity capabilities and partnerships. Our response worked as intended, enabling agencies at every level of government to rapidly coordinate, contain the incident, and help prevent more serious impacts to critical services.”

  • MNIT activated its incident response capabilities immediately after learning of the attack and continues to:
  • Coordinate technical response activities across government partners.
  • Share threat intelligence and indicators of compromise with affected organizations.
  • Support incident investigation, containment, recovery, and remediation efforts.
  • Monitor for related malicious cyber activity and coordinate with state and federal cybersecurity partners.
  • Provide cybersecurity expertise and technical assistance to affected communities.

Minnesota’s Whole-of-State Cybersecurity Program brings together federal, state, local, Tribal, and critical infrastructure partners to prepare for, respond to, and recover from cyber incidents. By sharing threat intelligence, coordinating technical expertise, and strengthening cyber resilience, MNIT helps protect the essential services Minnesotans rely on every day.

MNIT will continue working with its partners to investigate the incident, support recovery efforts, strengthen cybersecurity protections, and help ensure Minnesota’s critical infrastructure remains secure and resilient. Additional information will be shared as it becomes available.

 

 

How is Brooklyn Park Police Department using AI? (Dakota County)

CCX Media reports on AI use by Brooklyn Park Police Department. Great for areas that have broadband access…

From health care to education, artificial intelligence is rapidly changing our world. Now, that same technology is being used by the Brooklyn Park Police Department.

Minnesota noted for using accessibility to improve maps’ communication

Government Technology reports

Governments are developing maps to share information on a variety of topics with the public, but there are necessary considerations to ensure these digital products are accessible for all users.

State and local governments are required by federal law to make digital products — including maps —usable for people with disabilities by April 2027 or April 2028 depending on population size. But they face litigation risks today if they are noncompliant.

The state of Minnesota has been focused on the accessibility of its online products and content for years. In 2019, Minnesota IT Services (MNIT) announced a significant effort to make maps accessible. MNIT has established a map accessibility resource center and made training modules available.

The article offers a few tips from the Minnesota experience:

  • When trying to create an accessible map, Ewert underlined the importance of first considering the intended message of the map.
  • Color is another key feature for GIS teams to address when creating these resources. Officials should use colors with high contrast and test with accessibility checkers, per MNIT’s resource center. Because maps often leverage aerial photography as backgrounds, Ewert emphasized the importance of simplifying base maps so that symbology effectively meets those contrast requirements to be visible for all users.
  • Accessibility testing is done before going live with new products in the state, Ewert said.
  • In some cases, AI technology can help government make products more accessible. For accessibility work, it’s critical to ensure AI models are using high-quality data.

Practical look at Minnesota Government Data Practices Act in the Age of AI

The League of Minnesota Cities has compiled helpful information for local governments looking at responsibility with AI…

As artificial intelligence (AI) tools become more common, Minnesota cities are exploring how these technologies can improve efficiency, customer service, and daily operations. From drafting meeting minutes more quickly to generating city-branded graphics and designs, AI offers clear benefits.

For local governments, however, these opportunities come with important legal obligations, particularly under the Minnesotan Government Data Practices Act (MGDPA). Understanding how the MGDPA applies to AI use is essential for cities seeking to leverage new technologies while maintaining public trust and compliance.

The article addresses the following topics:

  • Government data defined
  • Is AI data public or nonpublic?
  • Entering data into AI tools
  • Impact on data requests
  • Practical considerations

Even if you aren’t with a local government agency or office, I think the practical advice helps under the implications of using AI yourself.

Notes: Technology Advisory Council (TAC) Full Council Meeting (July 10) MN DCYF

Today I attended the online-based Technology Advisory Council (TAC) Full Council Meeting. The TAC is a permanent body to advise Minnesota IT Services (MNIT) and executive branch agencies on strategic information technology initiatives and service delivery. Meetings are open to the public. I have taken notes on the presentation only.

They heard from DCYF Integration Layer – Minnesota Department of Children, Youth, and Families (DCYF). They are working on modernizing technology with a goal to adapt a whole family approach. They want to give staff more time to spend with the families.

Notes/Video/Slides from Minnesota Department of Children, Youth, and Families (DCYF)

Technology Advisory Council – Full Council Meeting:

  • Date: Friday, August 14, 2026
  • Time: 8:30 – 11 a.m. CDT
  • Location: Virtual Meeting – email tac.mnit@state.mn.us for information on how to join the meeting.

From the chat:

  • Here’s a link to the Chapter Law for the Human Services Modernization Fund, Council, and Commission: https://www.revisor.mn.gov/laws/2026/0/Session+Law/Chapter/120/
  • Here’s a link to the Chapter Law for the Human Services Modernization Fund, Council, and Commission: https://www.revisor.mn.gov/laws/2026/0/Session+Law/Chapter/120/
  • Technology should be leveraged to allow enrollees to report changes electronically with a no wrong door approach. Clients are expected to know all their different workers/teams and call on the phone, often with long hold times, to report changes. Audits have shown clients do try to report changes, but often the changes only get entered into one system/program.
    Answer: yes
  • To me, it seems that the “Policy Engine” would be the hardest thing to design. But the use case is so common that surely tons of work has been done on this topic across the country.
    Answer: We have learned from legacy system and what has happened in other states. We look at state and federal parameters. Policy support is key.
  • Is this pilot connected to the SNAP benefits project?
    Answer: They will
  • Any specific way to volunteer/register for some of these different projects?
    Answer: not an immediate opportunity but good idea
  • Is there an advisory committee that could be used to provide input/volunteer?  Mtgs to attend
    Answer: not yet
  • Not just keyboard only. Workers must memorize thousands of secret codes. Update the STAT MEMI
    But in the defense of green screen, it does work well for quick keyboard entry instead of a mouse….
    https://cms1files.revize.com/assocofminnesotacos/publications/MnCountiesMagazineWINTER2025.pdf?t=202601221049170&t=202601221049170
  • A challenge will be getting good data
  • How is the search from the Chief Data Officer?
    We are creating a new position. Usually comes through the Governor’s Budget, which isn’t helpful this year. The legislature provided MNIT with some one-time funding.
  • Do you need new legislation to get the position?
    We need a budget order and one-time funding will likely not work.
  • Home site for accessing previous Technology Advisory Council (TAC)/Blue Ribbon Council on IT (BRC-IT) reports, along with other information about the council including upcoming meetings, current appointed membership, etc. https://mn.gov/mnit/about-mnit/committees/tac.jsp

Notes: Technology Advisory Council (TAC) Full Council Meeting (June 12)

Today I attended the online-based Technology Advisory Council (TAC) Full Council Meeting. The TAC is a permanent body to advise Minnesota IT Services (MNIT) and executive branch agencies on strategic information technology initiatives and service delivery. Meetings are open to the public. I took pretty loose notes but I feel like I soaked up a lot of information that would be valuable for policymakers and policy-followers. I suspect it would be handy if you had a business in any of the areas discussed too. Attendees are the folks on the frontlines and a lot of practical tips flow freely on how to plan and deploy enterprise technology projects.

Updates from MNIT

Updates on 2026 Legislature

Ten Lessons about Service Delivery (by looking at process of paid leave)

Final Draft Work Plan

OPPORTUNITY: USDA Accepts Distance Learning and Telemedicine Grant Applications open to improve access to remote education and health care in rural communities

USDA Rural Development announces...

U.S. Department of Agriculture Rural Development invites grant applications to improve access to remote education and health care in rural communities.
USDA is making approximately $27 million in funding available under the Distance Learning and Telemedicine (DLT) Grant Program.
This program funds distance learning and telemedicine equipment, including audio and video equipment, to
improve access to educational and health care opportunities in rural communities. These funds will help
digitally connect people to education, training and healthcare resources that are otherwise unavailable or limited in remote parts of the country.
For example, DLT funding expands opportunities for:
• Students to participate in classes that may be in locations too far to access in person;
• Teachers to provide their expertise, trainings and educational services to students across the country; and
• Patients to seek specialized care and treatment from medical professionals without needing to leave their
homes or communities.
Eligible applicants include state and local governmental entities, federally recognized Tribes, nonprofits and for
profit businesses.
Applications must be submitted electronically through grants.gov no later than June 30, 2026. Additional program information is available on the DLT Program website. Interested applicants are encourage to contact their Telecom Program General Field Representative (GFR) and may submit questions using the Contact Us Form.
To subscribe to USDA Rural Development updates, sign up at the GovDelivery subscriber page.

New MN Bill: Open Meeting Law; meeting broadcasting through social media authorized HF3295

The new bill will be discussed today (May 7) at 1pm on HTV1

HF3295 (Gordon) Open Meeting Law; meeting broadcasting through social media authorized.

 

New MN Bill: to establish a steering committee that would provide recommendations on current human services IT HF4675

Last week, the House Human Services Finance and Policy Committee, heard about HF4675 to establish a steering committee that would provide recommendations on current human services IT systems and the development of new ones…

Counties have long lamented outdated “Oregon Trail”-era IT systems used to enroll Minnesotans in Medicaid, Supplemental Nutrition Assistance Program, Women Infants and Children, and other public assistance programs. Soon, President Donald Trump’s “One Big Beautiful Bill” will introduce increased complexity to these systems and legislators have said the status quo can’t accommodate that.

In addition to remedies proposed by Gov. Tim Walz and other legislators throughout the session, Rep. Danny Nadeau (R-Rogers) has a proposal to kickstart upgrades and modernizations.

He sponsors HF4675 to establish a steering committee that would provide recommendations on current human services IT systems and the development of new ones. The bill would also appropriate an undetermined amount of money in Fiscal Year 2027 to update county IT systems.

The committee laid the bill over.

Counties currently use two systems to process claims: MAXIS, launched in 1989, and METS, established in 2014.

Testifiers said both systems have issues.

The history of 911 in Minnesota from a 911 telecommunicator

The Department of Public Safety reports on changes to 911 over the years. I just thought it was an interesting look at how 911 has changed over the years, especially for folks who have ubiquitous and reliable cell coverage…

For Mark Lallak, the evolution of 911 is personal. He watched it happen in real time from behind the dispatch console.

When Lallak was working as a 911 telecommunicator in the ’90s, most calls came from landlines. Because the phone numbers were associated with fixed locations, dispatchers had a name and address associated with each phone number. If someone called in, first responders almost always knew where they needed to go.

Then as cell phones emerged, everything changed.

The update happened quickly…

Today, wireless calls are the new norm. In 2025, about 87 percent of 911 calls in Minnesota came from cell phones. People call from cars, boats, trails and countless other places where emergencies happen. It’s much easier to call 911 today than ever before — and that flexibility is a good thing. But it also created new challenges for dispatchers and first responders.

In the early days of cell phone calls to 911, dispatch centers often had to rely on cell tower triangulation to estimate a caller’s location. Dispatchers can’t identify someone based on a cell phone number like they could with landlines. If a caller could not speak, hung up or lost connection, responders might have to search a broad area, often as big as a square mile or more.  …

“Nowadays, when a caller dials 911, the latitude and longitude coordinates from their cell phone are usually shared with the system,” Carlson said. “That information can help responders get to the right place faster.”

While this process works better today than before, there is room for improvement. In some parts of greater Minnesota, calls may still be routed based on cell tower triangulation instead of a caller’s GPS coordinates. That can lead to delays or extra transfers, especially near county borders.

ECN is working to improve the 911 system through Next Generation 911, or NG911. The current network in Minnesota has been in place since 1982 and relies on outdated copper telecommunication lines. In partnership with telecom service providers across the state, ECN is upgrading the network to fiber optic cable. The upgraded system will allow callers to text photos and videos and even share data from unexpected sources like smartwatches and vehicles.

New MN Bill: establishing an information technology modernization account HF4808

The MN House reports on a legislation that would allow for surplus funds to be spent on upgrading government IT…

Torkelson introduced:

HF. 4808,A bill for an act relating to state government; establishing an information technology modernization account; allocating general fund surplus dollars to the account; requiring a report; transferring money; amending Minnesota Statutes 2024, section 16A.152, subdivision 2; proposing coding for new law in Minnesota Statutes, chapter 16A.

The bill was read for the first time and referred to the Committee on Ways and Means.

You can access the full bill – but here’s a key paragraph…

new text begin[16A.627] TECHNOLOGY OBSOLESCENCE REDUCTION KEYSTONE
ACCOUNT.
new text end

new text beginThe technology obsolescence reduction keystone account is established in the special revenue fund. Money in the account is available for appropriation by the legislature to fund the modernization or replacement of outdated or inadequate information technology infrastructure and systems used by the state or local units of government to administer state
programs.