QUESTION
What is the process for the Office of Technology and Innovation (OTI) to review and support technology contracts and projects?
1:35:10
·
47 sec
Council Member Jennifer Gutiérrez asks Kelly Moan, the Chief Information Security Officer and Head of New York City Cyber Command, to explain when agencies need to involve OTI in their technology projects and contracts.
- Moan explains that in most cases, OTI's involvement relates to new systems or applications being built that leverage cloud technology.
- OTI has a specific cloud review process that includes a security component.
- However, OTI's role is not limited to cloud projects - they provide security requirements and guidance for all types of technology projects.
- Agencies can consult with OTI if they have questions about whether OTI's review is required.
Jennifer Gutiérrez
1:35:10
Does the agency have to seek OTI if they're if they're if they're seeking specific support?
1:35:15
Are they seeking OTI for their review?
1:35:17
Or is this just in every single tech contract OTI is there to to support?
Kelly Moan
1:35:22
So it it could come in a number of different forms.
1:35:25
Right?
1:35:25
So large majority of the cases are through new systems or applications that are being built within the city domain and If those are leveraging the cloud, for example, OTI has a cloud review process.
1:35:37
Security is just one component of that, but not everything is built in the cloud.
1:35:42
And so we have, obviously, slowly security, even application security, but more broadly security requirements, documents made available for every agency, and we have we certainly offer up conversations and and questions and answers should agencies have questions.
