📋 Tender Overview
Project : ITC-005-07
Project Description : The security framework methodology implemented through this project is now being used during the implementation of new Information Technology (I.T.) projects and during change management processes to existing applications and services. Ongoing funding is required to ensure new and existing security measures are in place to meet the City’s security needs. Without additional funding we limit the ability to conduct thorough assessments and that would leave us deficient in areas where security gaps are identified. This exposes us to increased security breaches, or lacking in the appropriate procedures for new technology implementations, resulting in liability, embarrassment, data loss and unavailable systems. IT security can fall into two broad categories - safeguarding data and protecting systems. As a government organization, the City of Windsor maintains both public and confidential data related to its operations, residents, businesses, and staff, in addition to developing and maintaining hundreds of systems that are critical to the operations of City government and the wellbeing of City residents, business and visitors. There are two factors that have increased the vulnerability level of data and systems, not only at the City of Windsor, but within all organizations: 1. Threat Proliferation: World-wide cyber-attacks against individuals, businesses and government organizations continue to grow. There is a common understanding in the IT and cyber security fields that these threats will continue to grow at an exponential rate. The motivation for cyber-attacks can be, financial gain, obtaining confidential information, disrupting operations, jeopardizing public safety, or simply causing embarrassment for the targeted organizations and individuals. 2. Network Proliferation: Also growing at an unprecedented rate is the size and complexity of the corporate network, which significantly increases the City’s security risk exposure. The City’s network was once limited to computers, printers and servers. With the rapid growth of the Internet of Things , cloud services, and mobility, what is now connected to the network was unimaginable a few years ago, and the number connections to the network in the coming years will be limitless. While the IT Department has increased security staffing and manages security through shared responsibilities, we require funds for security tools and educational programs to give staff the means to enhance our security profile and reduce the risk of a security incident.
