Felder questions cybersecurity audits and penetration testing of 911
Felder asks if OTI or Cyber Command has conducted cybersecurity audits, penetration testing, or vulnerability assessments of 911 systems. Barbera confirms continuous monitoring 24/7, with penetration testing and vulnerability assessments conducted on an ongoing basis as part of strict implementation requirements.
So there is a continuous monitoring activity between the public safety team and Cyber Command Security Operations Center that monitors the environment 24-7.
There are specific requirements around system implementation that have to meet those very strict and stringent standards.
That includes penetration testing and vulnerability.
vulnerability assessments and those are repeated within the environment from a vulnerability detection standpoint on an ongoing basis.
Ongoing.
Yeah.
As NextGen 911 begins accepting photographs, videos, text message, precise location information, and potentially other digital data, what policies will govern access, retention, sharing, and deletion of this information?