Explanation
This ordinance authorizes the City Auditor to set up a certificate in the amount of $2,500,000.00 to implement a comprehensive Cyber Security program. The city is in need of a universal system of addressing cyber-security issues to be adopted and practiced throughout the city.
The Department of Technology (DoT) serves 21 quasi-independent departments, encompassing six elective offices and 15 administrative agencies, many with IT investments unique to their department. Overall, the city’s enterprise IT investment of approximately $60 million is growing by around 32% annually in new and/or upgraded tech purchases. Further, the number, scale, state and whereabouts of city systems, data and connected devices is unknown. As such, the city is in need of a universal system of risk, tech, cybersecurity and contracting practices that are consistently practiced and monitored for all IT procurements in the city.
Through solicitation of proposals, DoT will undertake a three-phased approach to establishing an on-going citywide IT cybersecurity and privacy plan. The first phase will be to identify and assess current and future cyber threats. Once identified, the department will triage the threats and take steps to remediate them. The final phase will be to maintain and secure all city systems. DoT will, within two years, bring all city systems up to code and will secure new purchases as they occur.
The moneys to be certified following passage of this ordinance will be used to contract with a qualified vendor for the study and implementation of a comprehensive cybersecurity program. This vendor will be selected through the formal solicitation of proposals.
After proposals have been accepted, DoT will submit ordinances seeking Council authorization to enter into contracts. This ordinance also authorizes the expenditure of $2,500,000.00 for the purpose described above.
Emergency Justification: Emergency action is being requested so that a certificate can be es...
Click here for full text