The proposed agreement would assign up to three University of Texas students to assess Comal County’s cyber risk and help implement defenses during the 14-week fall semester, with no payment required.
County services would receive a semester-long cybersecurity assessment and implementation help, while the clinic’s responsibility for managing technical controls and incident response would end with fall 2026.
The student team would work under instructor and mentor supervision, primarily from outside county facilities. The memorandum anticipates that county employees would spend no more than two hours a week on interviews, meetings and reviews during the semester, although the time could vary as the work progresses.
The county IT director could withhold confidential, secure or restricted data. Clinic staff and students would restrict county information to the assigned team, instructor and mentors who need access, and the confidentiality obligation would continue after the agreement ends.
The memorandum promises reasonable efforts but no guarantee against security incidents, and it disclaims warranties for the clinic’s services. Commissioners are scheduled to consider the agreement at 8:30 a.m. Thursday in the Commissioners Courtroom at 100 Main Plaza.