Notice Details

NYC HPD has 17 public facing applications and 200+ internal administrative applications under the purview of HPDTech, the technology division. Application security vulnerabilities are discovered by NYC3 (Cyber Command Center) - Security Operations tracking, crowdsourced security assessment program - Citywide Cyber security assessment program (CCAP), and through the proactive scan and analysis done by the application development team using the tools at their disposal. Vulnerability management consists of tools and processes to identify and remediate these vulnerabilities before an adversary does. HPDTech Infosec team is continuously barraged with new vulnerability data, all while trying to manage the existing vulnerabilities. Thus, it was determined that an application Security team must be established under the Office of Information Security to remediate the outstanding exposed vulnerabilities and also to work on proactively identifying and addressing the vulnerabilities associated with all the HPD applications on an ongoing basis.