QUESTION
What level of data access do vendors have when servicing the MyCity portal?
1:34:25
·
47 sec
Vendors servicing the MyCity portal have varying levels of access to data, depending on the services they provide.
- Vendors providing infrastructure and products have no access to data.
- Those involved in application development have limited data access.
- A role-based access control system is implemented to ensure minimal access after production.
- Access to constituent data is not required for system development.
- Post-production, unnecessary access is restricted.
Jennifer Gutiérrez
1:34:25
What access to data do vendors have through any of these vendors have through servicing the MyCiti portal?
Matthew Fraser
1:34:33
So I believe that depending on what they're providing, if they're providing infrastructure, and products, then they have no access to data.
1:34:40
If they're doing application development, then they have limited access to data.
1:34:45
We have a role based access control system so that once the system goes into production, there's very limited number of people that have access to anything.
1:34:54
And we make sure that the the people that have access remains in the specific service lines.
1:34:59
You don't need you don't need to have access to the to our constituent data to help build the system.
1:35:05
So we make sure that after production's done, individuals that help maintained.
1:35:10
They don't have any unnecessary access information.