cover
TO: Mayor John D. Laesch
FROM: Mark Taghap, Chief Information Security Officer,
Ram Tyagi, Chief Information Officer,
Jeff Anderson, Deputy Chief Information Officer,
Leela Karumuri, Director Cyber and Technology Risk
DATE: November 24, 2025
SUBJECT:
A Resolution to award a one-year contract for KnowBe4, a security awareness training SaaS solution, to Insight Public Sector, Inc. Chandler, AZ in the amount of $25,494.48.
PURPOSE:
The City of Aurora intends to continue using the KnowBe4 Security Awareness Training SaaS platform to educate employees on identifying and preventing cyber threats such as phishing, ransomware, and social engineering attacks. Through interactive, role-based training and simulated phishing exercises, this solution strengthens our first line of defense-our employees and residents. This proactive strategy reduces cybersecurity risks, supports compliance efforts, and fosters a culture of cyber awareness and vigilance throughout the City.
BACKGROUND:
The City of Aurora’s Information Technology Department seeks authorization to continue using the KnowBe4 Security Awareness Training Software-as-a-Service (SaaS) solution. Cyberattacks against municipalities are on the rise, with many breaches originating from simple human errors such as clicking on phishing emails or using weak passwords. While technological defenses are essential, employees remain the most common entry point for cyber threats. Continuing the KnowBe4 program empowers staff with the knowledge and skills to identify and respond effectively to these risks. This investment enhances the City’s overall cybersecurity posture and helps protect critical public services and sensitive data.
DISCUSSION:
The City of Aurora’s Information Technology Department recommends assuming direct management of the KnowBe4 Security Awareness Training Software-as-a-Service (SaaS) solution. Previously administered by the City’s Managed Security Service Provider, this transition reflects the IT Department’s proven capability and readiness to effectively manage and maintain the solution in-house.
While this item is under the $50,000 threshold needed to be brought before Committee/City Council, at the award of the new Managed Security Services Provider - NuHarbor Security (R25-332), Council was informed this platform would be brought through City Council for awareness.
A budget transfer has been initiated to allocate the necessary funds to account 101-1283-419.38-11 (Computer Software) in support of this initiative.
IMPACT STATEMENT:
Implementing a Security Awareness Training Software-as-a-Service (SaaS) solution will strengthen the City’s overall cybersecurity posture. By equipping employees with the knowledge and skills to identify and avoid threats such as phishing and social engineering, the City can significantly reduce the likelihood of cyber incidents. This proactive approach supports the protection of sensitive information and helps ensure the continuity of critical public services.
RECOMMENDATIONS:
Request the proposed resolution be adopted.
cc: Infrastructure and Technology Committee
CITY OF AURORA, ILLINOIS
RESOLUTION NO. _________
DATE OF PASSAGE ________________
title
A Resolution to award a one-year contract for KnowBe4, a security awareness training SaaS solution, to Insight Public Sector, Inc. Chandler, AZ in the amount of $25,494.48.
body
WHEREAS, the City of Aurora has a population of more than 25,000 persons and is, therefore, a home rule unit under subsection (a) of Section 6 of Article VII of the Illinois Constitution of 1970; and
WHEREAS, subject to said Section, a home rule unit may exercise any power and perform any function pertaining to its government and affairs for the protection of the public health, safety, morals, and welfare; and
WHEREAS, the KnowBe4 software solution provides education to all City employees on recognizing and preventing cyber threats such as phishing, ransomware, and social engineering attacks; and
WHEREAS, the goal is to implement solutions focused on reducing cybersecurity risks, protect city system and assets, and safeguard the City's reputation and financial wellbeing from bad actors; and
WHEREAS, Cyber protection is a necessity, and the City will face increasing insurance costs without the above protective measures; and
WHEREAS, a budget transfer has been entered to make funds available in account # 101-1283-419.38-11 Computer Software.
NOW, THEREFORE, BE IT RESOLVED by the City Council of the City of Aurora, Illinois, as follows: the Director of Purchasing is hereby authorized to issue purchase orders for services described in this resolution and as more fully set forth in the contract attached hereto.