City examines IT department following whistleblower claim

The City Commission will consider a potential reorganization of the city Information Technology department, a long-standing source of consternation at City Hall, in the wake of the release of a once-classified report about the government’s cyber security.

The discussion stems from August emails sent by Stu Erskine, an employee of the city’s IT department. In the emails, sent to a variety of parties including Vice Mayor Susan Chapman and City Manager Tom Barwin, Erskine outlines a series of issues he asserts are present in the IT department, most notably the state of its security and the issues with its organization.

In addition to the emails, Erskine provided Chapman with an unredacted copy of a risk assessment report undertaken by IT security consultant ReliaQuest in April. A summary of the report, presented to the commission in July, painted the IT department’s security and organization in a harsh, negative light, but the full text been made confidential due to security concerns. Erskine also took issue with the management of City Auditor and Clerk Pamela Nadalini, charged with overseeing the department in October 2011.

At the last commission meeting, the commission considered placing the IT department under the purview of the City Manager — as it had been before October 2011 — to avoid potential legal pitfalls when addressing Erskine’s status as a city employee. There was also discussion of best practices and the efficacy of Nadalini’s oversight of the IT department; a majority of Florida cities have their IT departments report to a chief executive.

Chapman, who seconded a motion to reassign the IT department to the City Manager’s office before the discussion was tabled at the last meeting, asserted that the concerns raised by Erskine were serious and needed to be acted upon.

“This whistleblower is not the only whistleblower," Chapman said. "I know there are several whistleblowers, and they echo the allegations that this whistleblower has echoed. … We as a commission have to address the underlying issues in the ReliaQuest report."

Nadalini has said the problems with the department predate her involvement, and has committed to rooting out security issues and reestablishing order within the IT staff.

“(The issues) didn't happen overnight and won't be resolved overnight, regardless of who you put it under,” Nadalini said.

Since sending the emails, Erskine has been placed on administrative leave, with city staff seeking input from the commission on how to proceed. At the last commission meeting, Fournier presented three options: the city could fire Erskine, allow him to return to work, or negotiate a settlement. In December, Erskine’s lawyer sent a settlement offer requesting three years’ salary in a lump sum payment, in addition to other benefits.

Additional background on the whistleblower claim, presented as part of the agenda for Tuesday's meeting and the Jan. 5 commission meeting, can be found on the city website, as can the executive summary of the IT risk assessment report.

The full agenda for Tuesday's meeting can also be found on the city website.

Contact David Conway at [email protected].