Felder questions Cyber Command's role in 911 cybersecurity

We're going to ask a few questions about the cyber command.

And cybersecurity privacy and vendor security requirements.

You previously testified in December 2022 that the New York City Cyber Command, I guess it was, I keep messing up your name, Barbara.

Barbara.

Barbara.

Barbara, I'm going to get it right.

You previously testified in December 2022 that the New York City Cyber Command plays a central role in protecting the 911 system.

What is the New York City Cyber Command's current responsibility for the cybersecurity of the 911 infrastructure?

Between the OTI public safety team and the cyber command team, there's a joint effort in unified management of all the cybersecurity infrastructure and services within 911.

I would just add, so I think as I mentioned, there is a, PSAC is governed by a steering committee, and Cyber Command has a seat at that table.

A seat at that table, okay.

Okay.

Has the NYC3 Cyber Command had issued cyber security requirements and protocols applicable to city vendors?

What procedures does OTI use to ensure that Motorola and its subcontractors comply with those requirements?

Thank you for that question.

Yes, Cyber Command lives within OTI, and so it is our responsibility to make sure that any vendors, the software that they are creating for us,

as well as the hardware that they are putting into place, adheres to the strict requirements that we have around Cyber Command.

Has NYC3 or OTI conducted cybersecurity audits, penetration testing, vulnerability assessments, or other independent security reviews of the 911 systems?

If so, what was the most recent review, and were there any material vulnerabilities identified?