citymeetings.nyc

Your guide to NYC's public proceedings.

QUESTION

What cybersecurity measures and funding do non-profit organizations need to protect sensitive data?

3:11:03

·

86 sec

Fernando Brinn explains that non-profit organizations that have contracts with city agencies often do not have funding for cybersecurity in their operating budgets.

These non-profits handle sensitive data and need cybersecurity measures like penetration testing
They need to monitor the dark web to ensure data is not being sold illegally
Their city funding does not cover cybersecurity costs required to be cyber resilient
There is a need to provide funding for non-profits to maintain proper cybersecurity

Jennifer Gutiérrez

3:11:03

So it's primarily for

Fernando Brinn

3:11:04

It's it's primarily for not for profits who engage and work with communities, communities of color, that gather informations, help them through whatever issues they're having with the social service of the city, have contracts with the city.

3:11:24

So imagine there's a nonprofit who has a contract, let's say, with the Department of Homeland Services.

3:11:31

And they're delivering services.

Jennifer Gutiérrez

3:11:33

I see.

Fernando Brinn

3:11:33

Well, they have to maintain an infrastructure.

3:11:37

And in that infrastructure, they have to ensure that that infrastructure is cyber resilience.

3:11:44

So there's pen testing, penetration testing, There is also looking at a deep doc web to make sure that that information isn't being sold.

3:11:56

To suspicious characters, that's a cause to leave some of money.

3:12:01

And it's not a part of their operating budget to funding from city agencies.

3:12:07

So I think the issue here is that we're not allowing our non for profit providers the ability to be cyber resilient because it's not part of their funding.

3:12:23

One thing we need to look at is how we can how we can direct how we can rectify that.

← Previous Chapter

Does the city sell data from facial recognition systems for marketing or analytics purposes outside of safety?

Next Chapter →

What is the policy on collecting, sharing and storing biometric data by private entities?