Your guide to NYC's public proceedings.
QUESTION
What cybersecurity measures and funding do non-profit organizations need to protect sensitive data?
3:11:03
·
86 sec
Fernando Brinn explains that non-profit organizations that have contracts with city agencies often do not have funding for cybersecurity in their operating budgets.
- These non-profits handle sensitive data and need cybersecurity measures like penetration testing
- They need to monitor the dark web to ensure data is not being sold illegally
- Their city funding does not cover cybersecurity costs required to be cyber resilient
- There is a need to provide funding for non-profits to maintain proper cybersecurity
Jennifer Gutiérrez
3:11:03
So it's primarily for
Fernando Brinn
3:11:04
It's it's primarily for not for profits who engage and work with communities, communities of color, that gather informations, help them through whatever issues they're having with the social service of the city, have contracts with the city.
3:11:24
So imagine there's a nonprofit who has a contract, let's say, with the Department of Homeland Services.
3:11:31
And they're delivering services.
Jennifer Gutiérrez
3:11:33
I see.
Fernando Brinn
3:11:33
Well, they have to maintain an infrastructure.
3:11:37
And in that infrastructure, they have to ensure that that infrastructure is cyber resilience.
3:11:44
So there's pen testing, penetration testing, There is also looking at a deep doc web to make sure that that information isn't being sold.
3:11:56
To suspicious characters, that's a cause to leave some of money.
3:12:01
And it's not a part of their operating budget to funding from city agencies.
3:12:07
So I think the issue here is that we're not allowing our non for profit providers the ability to be cyber resilient because it's not part of their funding.
3:12:23
One thing we need to look at is how we can how we can direct how we can rectify that.