Hoover, Ala. – At the Oct. 26 city‑council meeting, Mayor Nick Derzis outlined a decisive response to a Kroll audit that revealed serious gaps in the city’s technology infrastructure. The audit, delivered in July 2024, identified missing records, outdated equipment and insufficient safeguards that could jeopardize government information and essential services.
Audit findings and prior concealment
The Kroll report, which also examined the city’s finances, found 16 areas of weakness, including inadequate backup procedures, poor system documentation and weak controls over financial software. According to the mayor, the previous administration failed to share the report with council members or his transition team, leaving the city vulnerable for years.
Immediate actions taken by the Derzis administration
Derzis said his first step was to assemble a task force to conduct a full assessment of Hoover’s IT systems, prioritize the most critical vulnerabilities and coordinate corrective measures. The mayor highlighted that IT Director Jason Cope had previously flagged many of these deficiencies, but funding approvals were never secured.
“We have now closed the doors that were wide open,” councilman Robin Schultz, a cybersecurity professional, said. “Our priority was to secure the city’s data before any further exposure.”
State grant and university partnership
Hoover was accepted into the Alabama State and Local Cybersecurity Grant Program, which provides specialized expertise and resources to local governments. Through the program, the city is working with Auburn University’s McCrary Institute for Cyber and Critical Infrastructure Security. The partnership has already delivered more than $600,000 in new hardware, network equipment and consulting services.
State Information Technology Secretary Daniel Urquhart praised the collaboration, noting that “cybersecurity is essential to protecting government operations and safeguarding public resources.” McCrary Institute associate director Nick Sellers added that Mayor Derzis’ leadership “sets a strong example for Alabama communities seeking to protect critical services.”
Long‑term commitment to resilience
Derzis emphasized that the effort is not a one‑time fix. The city is developing formal risk assessments, incident‑response and disaster‑recovery plans, as well as business‑continuity procedures. Updated system documentation and stronger access controls for financial software are also underway.
“Cybersecurity isn’t simply an IT issue. It’s a public‑safety issue, a financial‑accountability issue, and a fundamental responsibility of modern government,” the mayor said. “We are replacing outdated equipment, strengthening our defenses and providing our staff with the tools to build and maintain a defensible network.”
Council reaction
Council President Casey Middlebrooks and councilman Steve McClinton expressed relief that the vulnerabilities are being addressed, though McClinton noted the lack of transparency from the former administration was “alarming, but not surprising.” He warned that other Alabama municipalities could face similar risks if they do not proactively seek state resources.
The council’s next steps include reviewing the mayor’s budget recommendations for ongoing cybersecurity funding and ensuring that future IT projects receive timely legislative approval.
Why this matters to Hoover residents
By securing state grant money and expert assistance, Hoover aims to protect the personal data of its citizens, maintain uninterrupted city services and uphold fiscal responsibility. The mayor’s proactive stance reflects a commitment to safeguarding the community’s safety and trust in local government.
Original reporting: Hoover Sun — read the source article.
