QUESTION
How can the public report potential security breaches or vulnerabilities involving their personal data?
0:33:23
·
79 sec
The public has multiple avenues to notify authorities if they suspect a breach of their personal information, separate from NYC Cyber Command's role.
- The public can report potential breaches through federal government channels or law enforcement partners
- NYC Cyber Command focuses on protecting city agencies, infrastructure, and employee data rather than handling public breach reports
- In 2023, NYC launched a vulnerability disclosure program allowing security researchers to report vulnerabilities found on public-facing city infrastructure
Jennifer Gutiérrez
0:33:23
So you're saying that in those instances, they would know how to communicate more directly with OTI.
0:33:29
Because it's coming from city agencies and staff.
Kelly Moan
0:33:32
So the the what I'm trying to say is the the public the public has a number of different methods to notify should they feel or think that they've encountered a security breach of their personal information or those avenues through the federal government, through law enforcement partners is a different means than New York City Cyber Command.
0:33:54
New York City Cyber Command's role is predominantly ensuring the protection and defensibility agencies, infrastructure, and and data, including the employees.
0:34:06
The majority of our cases that we see are reflecting that rather than public submission.
0:34:11
In 2023, as I mentioned, we launched the vulnerable disclosure program, which is a little bit different than what you're describing in that we provide an avenue for security researchers to essentially clothes, vulnerabilities that they may have found on publicly facing digital infrastructure, which provides just another take method for us to analyze assess if it's in fact a valid weakness or a false positive, which could happen, and then disperse that to the city agency for remediation or mitigation of that risk.
Jennifer Gutiérrez
0:34:41
Okay.
0:34:41
Okay.
0:34:42
Thank you.
