Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
City takes back door-access rollout amid security concerns and raises IT governance questions
Summary
The Technology Commission heard that the Johnson Controls door-access control system at City Hall contains security and configuration flaws; IT will retake oversight and ask the vendor to fix integration and operational gaps.
IT Director Jim Matoski told the commission on Oct. 22 that the City Hall door-access control project implemented by Johnson Controls has security, integration and procurement problems and that the IT department is reclaiming oversight of the project from the Department of Administration.
Matoski said the vendor'installed virtual machine running the door-control software (C•Cure, virtual appliance) uses a local SQL Express instance rather than the city's centralized SQL server, runs services under a vendor account instead of a dedicated service account, and includes an auto-login that Matoski called a "violation of security policy." He said Johnson Controls had been informed of the concerns and a comprehensive discussion was scheduled for Nov. 7.
The practical impact: the current implementation requires…
Already have an account? Log in
Subscribe to keep reading
Unlock the rest of this article — and every article on Citizen Portal.
- Unlimited articles
- AI-powered breakdowns of topics, speakers, decisions, and budgets
- Instant alerts when your location has a new meeting
- Follow topics and more locations
- 1,000 AI Insights / month, plus AI Chat
