The meeting’s focal point was the borough’s cybersecurity posture, a topic that has gained paramount importance due to the increasing sophistication of cyber threats. A comprehensive report identified several key areas where the town’s IT infrastructure was lacking, including inadequate backup and disaster recovery procedures, outdated and unsupported software, the need for an enterprise-level antivirus solution, and the absence of a formal policy for managing security updates. The use of Windows 7 within the Police Department was particularly concerning, as it posed a significant security risk.

The council was informed that the borough’s insurance deductible was at its highest level due to the current compliance status, emphasizing the financial implications of inadequate cybersecurity measures. The lack of multi-factor authentication and enterprise-level antivirus were among the critical gaps highlighted, with the need for third-party risk assessments when contracting service providers to ensure compliance with the borough’s security standards.

The urgency of these issues was underscored by the decision to hire a consultancy on an emergency basis for a period not to exceed three months and an amount not to exceed $15,000 to bring the system into compliance with tier one, two, and three on the cybersecurity checklist. This decision followed an discussion about whether to form a subcommittee to assess the reports from two companies regarding the IT shortcomings and whether to interview the current IT administrator.

The topic of cybersecurity was intricately linked to allegations made against a borough employee during public comments. The employee detailed instances of perceived harassment and questioned the management of sensitive system credentials. The labor council provided insight into the policies that were allegedly violated, which led to a discussion on the appropriate disciplinary actions. The council ultimately resolved to suspend the employee for four weeks without pay, pending a decision on whether to terminate the position or outsource it.

In addition to cybersecurity, the council deliberated on the use of property on Claremont for community scouting activities. The debate revolved around the challenges of maintaining the property and the need to find alternative meeting spaces and storage. The importance of scouting to the community was stressed, and the potential utilization of 251 Claremont as a dedicated space for scouting activities was proposed. However, there were concerns about the property’s condition, including the lack of bathrooms and the need for a new septic system.

The council also passed several ordinances and resolutions during the meeting. These included the passing of Ordinance 2024-1993, which exceeded the municipal budget appropriation limits, and Ordinance 2024-1994, abolishing the Housing Property Maintenance Zoning Compliance Advisory Committee and amending the administration code. Another ordinance concerning payments to Municipal professionals under the municipal land use law was also approved.

Other topics of discussion included the installation of safety netting at the Guas Field, with cost-sharing by the Somerset Hills Baseball Club and the challenges in locating septic incline well 21, which was believed to be under a house. The council also discussed various updates from members on community engagement and considered potential funding opportunities for scanning and digitizing important documents.

The meeting concluded with public comments on the seriousness of the borough’s information security and the measures taken to address it. The council then moved into an executive session to consider personnel matters related to the allegations made against the borough employee.