REPORT TO COUNCIL
SUBJECT
Title
Proclamation of October 2025 as Cybersecurity Awareness Month
Report
BACKGROUND
Our increasing reliance on technology, coupled with the growing threat of cyberattacks, demands greater security in our online world. This necessitates simple, easy-to-understand resources and tips to help individuals, organizations, and communities stay safe online.
The Cybersecurity and Infrastructure Security Agency (CISA) is a federal agency under the U.S. Department of Homeland Security (DHS). CISA was established in 2018 to lead the national effort to understand, manage, and reduce risks to the nation’s cyber and physical infrastructure. CISA’s Cybersecurity Awareness Program is a national public awareness effort aimed at increasing the understanding of cyber threats and empowering the American public to be safer and more secure online. Cybersecurity is a shared responsibility and each of us has a part to play. When we all take simple steps to be safer online - at home, in the workplace, and in our communities - it makes using the Internet a more secure experience for everyone.
Since 2004, the President of the United States and Congress have declared October as Cybersecurity Awareness Month, a time dedicated to the public and private sectors to work together to raise awareness about the importance of cybersecurity. October 2025 marks the 22nd Annual Cybersecurity Awareness Month.
DISCUSSION
Since 2015, the City of Santa Clara has actively participated in the program and is an official Cybersecurity Awareness Month Partner. During the month of October, the City will share educational content with employees on key cybersecurity topics, conduct a phishing campaign, and hold the annual cybersecurity awareness training.
A phishing campaign is a simulated exercise where fake but realistic phishing emails are sent to employees to test their ability to spot suspicious messages. The goal is to raise awareness and improve response by helping employees practice identifying and reporting potential cyber threats in a safe, controlled environment.
Continued training reinforces previously learned knowledge on a variety of security topics ensuring that employees are proficient and prepared. Key focus areas include:
• Using strong, unique passwords
• Utilizing multifactor authentication (MFA)
• Recognizing and reporting phishing emails, texts, and calls
• Keeping software versions current to reduce vulnerabilities
At the October 7, 2025, City Council Meeting, the City will proclaim October 2025 as Cybersecurity Awareness Month. The Department of Information Technology will be present to accept the proclamation.
ENVIRONMENTAL REVIEW
This is an informative report only and no action is being taken by the City Council; consequently, no environmental review under the California Environmental Quality Act ("CEQA") is required.
FISCAL IMPACT
There is no fiscal impact to the City other than staff time.
PUBLIC CONTACT
Public contact was made by posting the Council agenda on the City’s official-notice bulletin board outside City Hall Council Chambers. A complete agenda packet is available on the City’s website and in the City Clerk’s Office at least 72 hours prior to a Regular Meeting and 24 hours prior to a Special Meeting. A hard copy of any agenda report may be requested by contacting the City Clerk’s Office at (408) 615-2220, emailing clerk@santaclaraca.gov or at the public information desk at any City of Santa Clara public library.
Staff
Reviewed by: Adam Kostrzak, Director, Information Technology/CIO
Approved by: Jovan Grogan, City Manager
ATTACHMENTS
1. Proclamation of October 2025 as Cybersecurity Awareness Month