The DoITT IT Security Division manages the Citywide Information Security Program. The program ensures the overall security of the City's data and information technology assets through the following program elements:

• Performing information security audits of City agencies;
• Advising management and technical staff on the security risks of network, application and server implementations;
• Designing and managing processes to facilitate risk mitigation and management;
• Managing Citywide security infrastructure such as firewalls, Virtual Private Network (VPN), content filtering, and remote access;
• Forming the core of the City's Computer Emergency Response Team, responding to emergencies such as penetration or compromise of the City's IT assets, whether through intentional misuse or network based worms/viruses;
• Coordinating IT security and access requirements with other City agencies, the State and outside business partners of the City; and
• Managing the Citywide Identity Management program.

For helpful tips about how to keep your IT assets secure, read the latest Citywide Information Security Awareness Newsletters:

DoITT's IT Security Receives 2011 ISE North American Government Project Award
November 16, 2011
Watch the video
Read more about the ISE North America Awards 

For contractors and vendors doing business with the City, please be sure to visit DoITT's IT Security Policy page.